dhi.io/cloud-controller-manager
Kubernetes Cloud Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev
sha256:09700fbc17be8e8fc8041b104a6b6a4a97ec7ffdb64488b9b59d62b1cb5ba761
Manifest digest:sha256:f0d71dc9a1a082f03ec5ea365cdc683c056fb7576c9c7d1b4fe4963ffd57873e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/cloud-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloud-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloud-controller-manager@sha256:4a4aa0c0b8903fad80ff2b28360e3f587e0b053d3c0abb4a93528afa001b693c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloud-controller-manager@sha256:26da15432024ed2e4c10e8326d30ae491725580b8a3b4e41cf05fa29a3cd0a1c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloud-controller-manager@sha256:56e3294fb6f751d536a152ca76dd14cbeefbf930178578fcb50e1b3492a7060d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloud-controller-manager@sha256:e6f0397027e879b50909a0b858615d19423ee971acaccd56cdde1ad0cfcd41d4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloud-controller-manager@sha256:cdbe9e2c700a5b2ffde691c74c08d5ca9045c5a3c8ef7faa13ab92a381d7e11d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloud-controller-manager@sha256:89ffc02647b4a29c324542153ca4afdc23512f5961be51438df422820779c4f6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloud-controller-manager@sha256:85edc6dbb0f1737d67f5c6dac8e97f2bc8f73c5ce760c5f57d3bb4be609c26ef |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloud-controller-manager@sha256:29337afc2945a10b2cd587385de219f0e92b70fcec59a7a0432afbc90b2240b7 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloud-controller-manager@sha256:0d1e5851189daa6279791d8b846af873c4656d936c9fd6dc0370722ee27eeae9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloud-controller-manager@sha256:6799756782c59a8da296a320fea9428bb6772e5ca6a7c83c009c05a2795e5c3c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloud-controller-manager@sha256:c8c7eafd136cfd678a27605d7910d16e5e3fff3caf890966e9213dd3cf16d584 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloud-controller-manager@sha256:bab733916a9b0021006badc56337105db7d569fefe8373310725580631e94c5c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloud-controller-manager@sha256:6bd1c2f78f7539f2d0fb6dc8e9d923159edb734cb5f00af1ae0323ce7fce0085 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloud-controller-manager@sha256:bd8122bcff21961416cce1440b4ca1a8d1773cccd9ade4113a78094134457ed4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloud-controller-manager@sha256:39c99472b2319f2edd654736c87afcf2547107de8ac461ed1ca09703730f9a19 |