dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.13-debian-fips-dev, 1.34.13-debian13-fips-dev, 1.34.13-fips-dev, v1.34.13-fips-dev
sha256:e1d22ad15083db844b75b0977659ad399589f12186f4c61ebdb10e3285e744c5
Manifest digest:sha256:1496b14fb4bbbbe829841dba124ff6d6f2eda11f15cb2720f39b3accf637772a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:73996c6576a4f3ad16c37e2202caf216c0755190b1c8097901ca3341cfb4907a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:7787d335d474318583271c290056761fface2fa29e2eef1dc70eed186936fdf3 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-proxy@sha256:371bbea117d603ebc75825afe15918f17d33a9f1cca1dada57ac3421f19a5d09 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:3040a90019b68d61da55e57d7aca2647053ffc9b0f982b22c55c4d129137a1ea |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-proxy@sha256:a61f2ea156a68a9cc8ff35b94685d10a82a6db7c728663e7bbfac264ecf54b67 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:9570a2290dc58bfad8346f5b157851cb1b0126cb6be7654474fe442b3e2135e4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:89c5730e4173efdb5d12287708af2ac01318a0067b8b2b151fa12ea5ab3fb627 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:b7be3710832cae467a7b891eeff0510d233592c091f076535d41d956d9b33a14 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:59bee3f3654d04a4f3976ded6a2a2efb0320fbe1428a33bc3c922433c08438df |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:9d97e770c40d306f69cd3e90a86c376ab5fd72f4f298d07d7acbd30ea573f107 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:9540ef971dff8a2971c90d181ecd88a13ce8f11886418d59792a6bfbd984f89d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:9cbc04ccf7a66b250d8ba538abe8271a76639a333e2214d6324c2e0aadb2145b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:3cbb989d96288ed5c995c03e67a676a8e710dd87f2ef29c5403436c7e44affaa |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:e028e81a7272d740ae22fc45af1add83cdafc0b9e411430f94ebcfb82e4539e8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:dc7255d8dd0e394d822c221ac65fdc852af036a3db542be4e6eaf80bed2affb3 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:f2b76be04e28f5e679f04a22b3166034386b50ddd3e8de30f4494d74a7861d8e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:ee32d8ee8f4b35b605fa71d374490e084cdd2fd1fa7a090f98280a74c284aca4 |