dhi.io/cloud-controller-manager
Kubernetes Cloud Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev
sha256:b311906004a357b1a9127429a79e2650a5bd83457b6ba104353d06f28ab19d1f
Manifest digest:sha256:c90f61f280e1b21eb0fc50c639b6f94011133950a7162e35698306715b51e31c
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/cloud-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloud-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloud-controller-manager@sha256:2fd710c88036f175ee94c9a660d96938b4e892f34378a36bfcedcc9c2d97ea80 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloud-controller-manager@sha256:a64432ed6c3f767226d487e90b10f8f8964653c7d93db06bf9366b818b0debe8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloud-controller-manager@sha256:16afa07754bc1e4e5d2c07b55b67bd77198638e15e2a4112e7568caad11a11a4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloud-controller-manager@sha256:c4d1988e9ff47ca5e5f51f3177190d711f3163b8132a677376e33002749a93a2 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloud-controller-manager@sha256:65cdcfdf93232d00d77a534f193b4cab0a258833bee856bf87e87534cb9ea5e5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloud-controller-manager@sha256:3fdd67d2e3061a993233e2bafac210563d89f56aed2c12b60829180461f50ddf |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloud-controller-manager@sha256:585c1aeda8782ac437f1b830c033470e8bc4dcfb6f1aeb5a6af61f7f5bea423f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloud-controller-manager@sha256:f72b8687bb993dac6098b58aa3e2752662b4a831d0bf46a784bb990a934c954a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloud-controller-manager@sha256:829f83ba53902dc79a0033f90921f1ff771c056acc03fe3e0823d172585d8d80 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloud-controller-manager@sha256:9a197c66b171f8d6a504dbaccd72b1b58af453862a6de2c05e65cd6ddf35b229 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloud-controller-manager@sha256:e1ab090ac5401ee80b6f502e73fbfedb5db343c196d2507a171c998ca772b147 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloud-controller-manager@sha256:561ddc4175a03e6b231ea52941b6a3e87cf0788af3423cc4700d924d54774856 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloud-controller-manager@sha256:74100ef6eb3ce96b7ae68fcc37a6c3990002e096bf889555c8279bf475dcda81 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloud-controller-manager@sha256:c852b41e5221e78b6d3ac6e2b8811cc96702be7e010e728c54f3ff0af227d03e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloud-controller-manager@sha256:0c58cad4ba03e9d62ffcc803fac714fca9f877a842faa605ac93d92ea4819526 |