dhi.io/cloud-controller-manager
Kubernetes Cloud Controller Manager 1.34.x
1.34, 1.34-debian, 1.34-debian13, 1.34.13, 1.34.13-debian, 1.34.13-debian13
sha256:30e37eeec1eb8ab62d89880099969dbbfa0e1f7bc36c459c1ba048e55a863d81
Manifest digest:sha256:f49761ae8b4787b52abb5ed701e9c3a48dc1ec580c7a20d77e159fe7d2deaeb5
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/cloud-controller-manager:1.342. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloud-controller-manager:1.34 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloud-controller-manager@sha256:ce200a970d8b9f61bf22fa0c469361e85f3e5aefe7110c56027dd5d656aaccfd |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloud-controller-manager@sha256:9d70b65158d9c0aa5da36dc682b1d552ae3773e8551b95ce99f707d3ef96f37f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloud-controller-manager@sha256:2024d08d4c46d9cbe767e0371b54b2354964cd7fb7a3a0eb194c57e728397efb |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloud-controller-manager@sha256:4fb3654160156eb181f70c395cabd6080bfa882a2c354f8079a5b96d77aab4d7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloud-controller-manager@sha256:7306148f33ffb55c1515030d8f46e4afa4c806375688709214494fc2795cd88f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloud-controller-manager@sha256:bfd2d72cfe176605c95e7a87d2f48b932ce74d51c3c363ff415cb954cca01af9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloud-controller-manager@sha256:49517f47bb4d31043898e272c034a8999381d7386eb0019f980ad40f4efcc033 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloud-controller-manager@sha256:a796df8a377006a62f62f8f89518ff4b64609bbe9b012a399640eca2b587c352 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloud-controller-manager@sha256:63aa702fcd5ca79c809be5bc00c119d785f4b52f1d041f7b88212ff29e78aec1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloud-controller-manager@sha256:47bccb1a37eb74624a6a3237a31e13b788ecdd7783f39766567eb57cabf19eff |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloud-controller-manager@sha256:84a279e0d312b88cc20f6266e940b5cc290b7da905f16b755962082bec9ea66c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloud-controller-manager@sha256:eb0258b27e78c2a44b452a288f1deaafadb0034cd0f9010a9490041e44f47ed8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloud-controller-manager@sha256:29ad3406149db0182da32da81c263d42ebfc860e1176e9543b907817f880521a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloud-controller-manager@sha256:f42915d47e2b23a960d9ee50ca32f546a015a69811452782a0bc507accd5ecff |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloud-controller-manager@sha256:a8a32508a62105a235af87b535f4d1ace225d0841d3564421c36906ad1eaf36c |