dhi.io/kube-apiserver
Kubernetes API Server 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev, v1.34.13-dev
sha256:32e770391d1a0b7a2061796ea855f18a5fc61282ee0913c0f651160cb52e6afc
Manifest digest:sha256:1479d578200e86f0ba0f998aff3e27cd1e246cc33b86a04f4c9a96b8eb08ea6a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-apiserver:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-apiserver:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-apiserver@sha256:0df381deeef4620e1f5aa197e2901c0e52a25d5c551cffaabc56a2ff5363fd44 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-apiserver@sha256:969a16670feadf376464ae3e1b40d6b2f8b6072bdbcb47d35f905ee8781635ae |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-apiserver@sha256:6b090902188098266bc04af98e326881774264918d0e99bee83c27c90aa84780 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-apiserver@sha256:a1606b03117c434517f161f8e88456c48aa50f8ac7972e63d619892803524004 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-apiserver@sha256:7afed59cd75d4ae9e1d8dc3c9d2d547989930578540bca8c796ab97975a12a68 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-apiserver@sha256:424498a8855aef70a911b4be7518642fb89a6ff0ab990215dd02a5b20ee60173 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-apiserver@sha256:e6ed70d0b12c137507cca6ff3dd8f098b159dcc6ad8df6ed1d4bbc358f3542f5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-apiserver@sha256:0eb598d39592d7f90d9da023ed558d09cb0b330e96b5ada2ac6fc19140481cc5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-apiserver@sha256:c6a36ecf7784f36a81e95a41d931ea6baa77538fe571cc4598bb082a11827fcf |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-apiserver@sha256:d9d54700ecdb2274730618fecd1df26a70cb7514ab5269e1d555cd47aa343775 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-apiserver@sha256:f312bf14957cdcd751d9ecdf60979c97823f3423df17d7b4083cf88a9af9be7d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-apiserver@sha256:2a62db8d35632b23f0fe3c115e7c03593e590ad7acf8ba0634dcfff664d07983 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-apiserver@sha256:e296d20efbcef023ba4b917dc08612b7aac8dfd1c71fb9c07284a16e520ebb91 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-apiserver@sha256:d1928701070227bd6398885511d0d4a63de88c6a15b8bbba814f7202ebceb083 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-apiserver@sha256:82c9065194aa6e8b29cce7da72198ee8257252228b69cb3cdd06536138c761f5 |