dhi.io/kube-proxy
Kubernetes Proxy 1.34.x
1.34, 1.34-debian, 1.34-debian13, 1.34.13, 1.34.13-debian, 1.34.13-debian13, v1.34.13
sha256:ab66b493168acd2d99e98eea14f8ac470d22c4c31b817aae9d5e982504c11efc
Manifest digest:sha256:543148b19d1b417ba3431d9c2bcb744a658a2a04c90bef2be082e798f117ded2
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.342. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:88fd2011c3f3754cb5d5ec37cbbbef812e0c26925822374c9c807237fa54037f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:bfd69c09f934af78531950f2b0499f6fbf5cba08246789cffd4cd0887885f665 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:c371b300d0232fca0c532096852069e4ade1ed1af92736cb7715694c64125e18 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:63629904413ef8a6f80f6e61f3126afb1770fed4c58aea70c76f78a4972b3137 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:3b35c1b2ff494763de3763586b21d03b64e270cd9a4d01ae496aacc5089f71d8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:d82111c0c35009a6439a2fe28c1467bda9e5b86da0d0a0fa46102dadafbcc8ea |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:6dcd68c34defd9eb70ea2806f64bcdf59c460b6fed08d2dcaf5e8b7de48203ab |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:8d1bb7732dead767c0ab66dfb4695a4c9616f0ab926f0e77185a8bce1978b66a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:e829351689548a6e78e4e60b581c57eb422982d445b76f825d64f1c36d4852a3 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:591ede4d19c4546b42c39dec33c3c96106b0009689f6ce2623783447db00ad7b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:eab7c961cafa29f41a84a38cd212913cd532de3b6c93ac49c8cc1be11001a80e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:65f28b13b3663b4f8292bfae011578419b9e8ef389751b5cac1a9e0548bd8c0b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:529b44c292a81da73662c72f94e2fed6f4918402c61f38f81ccb286e7e4c1b3f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:1695978f0412023dc467cee4dd6c88ea82df766957e104c362d437723819628b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:f86449f964b63e40f13f1e7f66cef009032f0c5d518bc47bc7575179d9c1541a |