dhi.io/cloud-controller-manager
Kubernetes Cloud Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.12-debian-dev, 1.34.12-debian13-dev, 1.34.12-dev
sha256:7e8d91ef41ab35dd6b3f555fa9255279709c8f3d0f2bb1c4f2ccf9ac6b03cb07
Manifest digest:sha256:4408bbbf872063f29b2b32a29f874fbaefce4b6a9c29d4e7f743dccfe32b3c9f
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/cloud-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloud-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloud-controller-manager@sha256:73713eca87b882b2d8ff17e5fbfbfbaf94f49efb975be0362c103746fc152e94 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloud-controller-manager@sha256:d7144523fcfada973ed752abd2327a2a7240fe610e079fd25cde90ba64f02f45 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloud-controller-manager@sha256:a2dc920f3fdb7e527f1e9776e89433226ede4a4998d4473c3ef5430888c68960 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloud-controller-manager@sha256:666be60d9787c01b90e21cdd585114992ae9d692deae997c96a541caeabf6290 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloud-controller-manager@sha256:85bd2017e1994b7bc2badee6a900d7edf2ac7cbfc7a7d3f391d1cb8ccb5903a8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloud-controller-manager@sha256:6e865a60f619fd7279a1fc99595234d798f99c4f50442b94d7b57433fa4dee17 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloud-controller-manager@sha256:5a9fe27e19e4916bae171313eb17dc7d81e45184ae0493ace30f26208656e08d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloud-controller-manager@sha256:ee26500613a7b08eb10b3cb2d513653f9abdb29582835a7bf6acda94311d0398 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloud-controller-manager@sha256:5f892218127f28ede7ce6d3f8620e880295aa5e4c6f1d8b0351cf96319498155 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloud-controller-manager@sha256:62b55221b6e087101eaebb8ddaf745113386c461f6cc8c4e9cdab7e5568752b7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloud-controller-manager@sha256:dd0082df97f76e229876fd77597767494cf5d068785bbab5182ae1805e0ae5d9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloud-controller-manager@sha256:b126b108758e8e9d29e9d6d26dd2c958638b4bed9eff3344b759d11e916c8ba5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloud-controller-manager@sha256:bc15f3e951d7508779fbf8c4124917eaaf1fcce577e98ca9f1e4363ea122847d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloud-controller-manager@sha256:5fef53c32fac563e8f765d426105ed72c011d45572b1c4870dce3fe471a911d4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloud-controller-manager@sha256:7a95749757200ffa85535b7fea44609ec2241c5018278a5ceaca98b1b9a15d72 |