dhi.io/cloud-controller-manager
Kubernetes Cloud Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev
sha256:02949d78446f5d57ed3bcb3c6cfe326a722623353665806f1305c3d070aeae64
Manifest digest:sha256:9bb315ce63fd7cfe7f0308e8d103f4261e59c3fbc13f048a5982860e35a59b7c
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/cloud-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloud-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloud-controller-manager@sha256:b5eda0368e6e0e059b451f8de629a27b11e48f9381c77d9041da94209438a06a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloud-controller-manager@sha256:00b96ebc6e078fc741527bfb00798f2aa8db5098dc5a5dbf29136c6a423be950 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloud-controller-manager@sha256:f5de4d669412f34b89a1aa6699a2d418004ec70a73afc7455c8e29911ae71616 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloud-controller-manager@sha256:c14b641bd6cfc955113dab0b722cf042c394d79dad62329b1dda7d57d742e8d9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloud-controller-manager@sha256:8378318b99865ddcd209f22d15f1bbc96fd644d7ec3d53079d88522cc37f1f88 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloud-controller-manager@sha256:7d68ffd0f7baaebba2265c2c7759d1137b314c18b8c38b7a689b6427513f382c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloud-controller-manager@sha256:85149765a52fde11aebaf499ab248c7bb10b33ed45f74de3b39f4498c1f86e37 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloud-controller-manager@sha256:c8ce189bb0bf7885443b04c19daa279d60aa55f5b46fc7a87bde06aceeae97c9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloud-controller-manager@sha256:62c730c5440e78e54170a7d630b904ecee07b0ede29d4972398b5036d8374e78 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloud-controller-manager@sha256:0270c1269fc10c19fe2c2791e5d1ce9be11d511fd2a7ba9cf001d7efd74082ab |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloud-controller-manager@sha256:b16ca4de5875b6cb7dfeb72c7b41b6647c9a1d90faee75219c36c39da8c4d839 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloud-controller-manager@sha256:4b4a71368abda787ccebbf3dce08294034e45513e8108c9519afe850014514ca |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloud-controller-manager@sha256:182e14d0d93f18a8b91db9ecb97120f5827f1d1e10304ce9d3ba211504e52495 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloud-controller-manager@sha256:e6f3903100e21c96b8cec5ac5e2a6a3886903b2206c864e5df9dfce49f334e82 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloud-controller-manager@sha256:d49d84b393cce87ee394d76a0e14d72bb192043c08dd4c1ae0001a2621fb7f45 |