dhi.io/kube-scheduler
Kubernetes Scheduler 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.13-debian-fips-dev, 1.34.13-debian13-fips-dev, 1.34.13-fips-dev, v1.34.13-fips-dev
sha256:7b77acc58f52141381485ac4c29e592a3e69787c7de28de918d33a50fd7daa5d
Manifest digest:sha256:4a3933859ad07f34ffb1f36d4a26150a54fa5b76a2c530e863f20aae3b2fdfa1
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-scheduler:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-scheduler:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-scheduler@sha256:b83576e7ed8d6fda04a393bb9a651be2370e1e291bd9e1b0dfa8bf9326dd37fa |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-scheduler@sha256:63b8d4f964137876f0a1192dcbf1e5e6059664da3f6d09f139dbda7559194552 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-scheduler@sha256:11101e0a5bbcce1b5c2d773db702182b68c85e049df2a36afb1d2a529248d676 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-scheduler@sha256:fe06c663387c8462cf8571db06a76cd2732af41a1a4ff257051aa0136f5f007b |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-scheduler@sha256:c18b2b50422308988fc2531a3be8dcd61df90446e4b4c368f7d4f050d32ec7f5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-scheduler@sha256:070ca40bfc919d99f946d0f8751d1fb0b3c5053250736c7dcb8b7ea8d119cf58 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-scheduler@sha256:b0193c06fe31006e206e8625d2b4181cdf7b840b892823701af6d698737df329 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-scheduler@sha256:9f42c84814d49c778ce4d0a6af21508cc20a886e89e19a3415697b635a79e36c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-scheduler@sha256:690c689b5784a7ff7c929b3e5b9833a59a793b7c4aa404ff3100bc87e927e003 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-scheduler@sha256:a7af4b49c00cae293fc8766eb37b470753dcbdcd96cab08fd59385b1e6a8d300 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-scheduler@sha256:ec91a65cc4b770e834e2c5acecd7cc5dbb995faf684c51787564c1d0de78b5e3 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-scheduler@sha256:c72c024a23dc5de4106c5b3ecfc950b291204977fbf8c6647852d81dfb53f46a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-scheduler@sha256:ea569e7c576693510cd275eb253dae36b9ba7ffc7d1cacd0324a51bcf1bb379c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-scheduler@sha256:0d3b6de3fdf943c6debb788e9eec9ce04f1e576c746cd183ff462e2329e3cf3b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-scheduler@sha256:c1f22da610421794c97c98801844f67b9776086a44e809b9ab9b7b86d84535f8 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-scheduler@sha256:89315487f3da092ff61e167e59269d85dfdc6a828d5ff01bffecc28aa8f4342b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-scheduler@sha256:863eba23f93339bb3180d6a14c6e285abc3ebeae08372ce3bca3d0ab44197751 |