dhi.io/kube-scheduler
Kubernetes Scheduler 1.34.x (dev)
1.34-alpine-dev, 1.34-alpine3.24-dev, 1.34.13-alpine-dev, 1.34.13-alpine3.24-dev
sha256:d97c38f8cc09dea90aab1ed46cfefa26c5246eeb073587e1695eecf49368c2b7
Manifest digest:sha256:c287afb2c9cee1aa7966f5713b2501748ed9d62b3d2d3a2f2d361cc787ff89ca
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-scheduler:1.34-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-scheduler:1.34-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-scheduler@sha256:0e6658e0dec98e2b1f2a499683b311f9cd397e437e72fdea08b7c7001f6b2ef9 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-scheduler@sha256:24bee1a5bd6e8168dd8b3a508c02dcafed197af68f9bd16a0d99638c40c47ded |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-scheduler@sha256:bdcdc9743bd6ad533f9434d4af18a91c98f7eb4a9024658935d3842abb279555 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-scheduler@sha256:6976a90242c56a8f40a10d3cec8e49bd5c3b8a6c26aec05be0f67ff7c6d509f0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-scheduler@sha256:a0672037f41b96a490a2f8701225f96a91bc139b2b88fcfc073f70a6cbd3f85f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-scheduler@sha256:d6be438d75c9082ff867c2431bea6bef023063771171f948fa9ed7efcd572e3e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-scheduler@sha256:a4734a36b399c18755bd9cf0aaaedb122920d187f9f817d9242a0f9e960d532e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-scheduler@sha256:c49dbbe09873d39ad5517f6bf45fdabefebc62b76179569b062a3aed779b5c20 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-scheduler@sha256:cb1917beeb78942a7a02e2dccdd1ec7d6bea81a12e9c5154f0588492328033c4 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-scheduler@sha256:59b8dd9a14443bbf57a5fa267dfbbee905ad99255c9ee4ec57ecfdb665c453a6 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-scheduler@sha256:a64183d1d0f95d1837a66fbe58c010aff21521103d003e438a43eb7b8c7142a8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-scheduler@sha256:2f11911fcdd16b953fba583c17c0c9581d654a3df27b4d5e2ced60914ccb399b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-scheduler@sha256:368486786e5c5e763f4d922aa96c3133016508d715e238336fdbd04d305d9f48 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-scheduler@sha256:95d373bb1070495ccf524cdfd016456bb572853189bd870b14890bcc618322fa |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-scheduler@sha256:6f865b81a1676980fdf9434fe02ef79e2db0d4ef9a9f5535a85b9abcc1e35f38 |