dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (fips, dev)
1.32-debian-fips-dev, 1.32-debian13-fips-dev, 1.32-fips-dev, 1.32.7-debian-fips-dev, 1.32.7-debian13-fips-dev, 1.32.7-fips-dev
sha256:058780dd9a54fd062c64fb8da7844d9f9f001903860b77e7e06cbe3c3f110cac
Manifest digest:sha256:3c0afb38706ceea8d674cc8cff6564bf0123fc824951777b28bd42843425d73a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:61c2b5e0b7694d6f2931511dd2cc3734dc5a0afee8ea6590dc036972376cb6e5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:09a290c9ec5d5278877f43f45c2da671cff294a02689bda1cc0233a8996267a6 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:9193eda1180ff77e6154f752cc53291def77016ae15290a3bd31ff7e1ecb154a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:245999b5f7d76387557785c96b4ced81cd3bcefd6583af0c1869ebbc4cbac144 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a1117c87a445e638da627567ddbc84f9b0fe8a4beeb78da6fdd1ea5b99c2a9c3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:a0a8b3d51e94b6d3e493ae5044e98863266c42966bebdd6aaf4631fa245a5d6a |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:17626735c04dd2dc70ef1ebb3d018975973716a5c25412d73148aa93e0915933 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:02fcc885b57903d2f2d7966c97c196d704173d541c3931a41f964b9553f354c9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e8349629d06c889938428bc0c5ad488efb519fdd9cdf6140699304dccfb85aec |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:147b43317cae444aac3210ddb15346382ae8bfcc2180ecce8cf66a1b040f1b11 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:cda2dfd2e7f909baf2cbe5bceeaea5f3975adc46033634cf10ef6f0b85ff1784 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:cd9ad9d2dfc08cf49dd0d7fc17c40747fc2f3a68b05abf5386a30f45a54b3c98 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:fdd256663db1f0454338f182685ceee584ebce3b2bd10cd3918965ea5f1cb1dd |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:424b85141c9ff2c901e90dbf233c65203c67fc3bba792c57a61d87a767ce0c24 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e6d55bf42174edd1d4ab12781c4125f8b255294aa57ee0a6da6af8157ed36d66 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8d123ad3ced3e874cae0323cde6bbe8d317e09fd708d4c4c56a7b3776c194386 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:1bc0d018f5b6fe3569396b4b14f5aeb6d8fb69b2e5aab7b30fcf8d78b9256c8f |