dhi.io/kube-scheduler
Kubernetes Scheduler 1.34.x (fips)
1.34-alpine-fips, 1.34-alpine3.24-fips, 1.34.13-alpine-fips, 1.34.13-alpine3.24-fips
sha256:4466b435868fcfd069c45ceba77e2632dc13c2ae9b88fce274a2a90631a4bc82
Manifest digest:sha256:7edcba505eb9ed01d75b69b1730ba294f460ea5fbdaad0d8b31f653e442ccfbb
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-scheduler:1.34-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-scheduler:1.34-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-scheduler@sha256:5c280a60b663274abae8f3f862b61d14e023a5a2d03543c45a410a465f91a0de |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-scheduler@sha256:f3e6dcaa327f2871c778f3d5cf41cea4c5c63f4367110a4e71a91f21821fe575 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-scheduler@sha256:ebe2978cff276dfec55e6fcd833f7a3cb4a755c90613cb1065f3307a4a127de2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-scheduler@sha256:43b38d2a0782aab89ad884575c518a6fb5a073f0f1fa09ecbe0bbefa18d07817 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-scheduler@sha256:97824375e7a318c7a201f39a1678c38d1c78207ae64d5b027c833890b6df9d5a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-scheduler@sha256:4a792808c6d5ca9690b2dd5e70b9b994e158dce1ae4b7584ec4ea93fe573ec24 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-scheduler@sha256:0bfa4205be6c6767a49d4785294d4755278ce52514a3254426cfc686dfc8edbd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-scheduler@sha256:643510b1e682e42cc3dfd06c7cd889172340993e49c680d33e90c0b3f10468ef |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-scheduler@sha256:775a80f0a0c58bedcc0fd411ef64faa6dcf1fa3486d3fc977c6246dd9e919edf |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-scheduler@sha256:c68f5fd14dfb13dd1c4b273ed6f56605e90245fca5087ad695234d50ca826e06 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-scheduler@sha256:8be7246519fa3155caa23dd9b21b393ad321e78f7767df2ce4c76bbe15d8a15a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-scheduler@sha256:1569be20255566f84657357210c17b1a544aafb4e389f65c67c2acd383e4d2d7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-scheduler@sha256:177a6e8b9de43ad061c2260bb35ee77ad1d946b85c8e249593a082a7c09615aa |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-scheduler@sha256:24c67b9a80a799be4d29a2bd75f6557fe553fefe989179e021eefdc8e4d0c8e4 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-scheduler@sha256:91de94aef43c8482f2129cad750fa3d2de7972415adf6b77ec880307e8ba99c1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-scheduler@sha256:819fb3686fd0eae68da30a86572ff5c72bb0cbe67291efce0d3dfa0a60229bb6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-scheduler@sha256:7b6f77d8a4b0c5c25c389c42b46aeb699481dc8c474f647cae42f90dcd526fc7 |