dhi.io/kube-apiserver
Kubernetes API Server 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.13-debian-fips-dev, 1.34.13-debian13-fips-dev, 1.34.13-fips-dev, v1.34.13-fips-dev
sha256:60b4bf9e148924968bce6e08de57e20c9577885a16549a8f9aa298d6c397b9b0
Manifest digest:sha256:53f818bd5332600b20699cc03fdec8b7b7075650750a9ca4745a497345703cea
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-apiserver:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-apiserver:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-apiserver@sha256:0c2b8e7218d1bc25dbf4537a6aba44cfa5bdbccf5b6c9050bf957be8d37cff46 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-apiserver@sha256:833286146114e3f7f5306c758a7abc8f245e07c45fb5ad3777f2a6ca0d32a273 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-apiserver@sha256:2bd367c833c9c3b29e06d4f8cd8c7681b4cd085423178bdb32a5ad0652294b9a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-apiserver@sha256:e475359392ecf498864b4335a01f746bd61f4799c0732f58dfbc35596649fb03 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-apiserver@sha256:19a8d1f56a5d786e421d869d70e8a38b0e4bc31d12e8f151e71c3b21554139f5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-apiserver@sha256:44e4c7dc2828524231ca26d0e64520c24c6fa3803df4b7c36178aa496d16efcf |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-apiserver@sha256:eb2122469415098ea93e3ea620f038eca7196ff6dca739417a2e64dc6e1e88fb |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-apiserver@sha256:b443cc855a38cd0606ace6c692a7ddf5932516042f8a243912c0263912ead824 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-apiserver@sha256:cd05e60a6623d4c375eba3ed2e864ccc443b32fea64adf0b278b4681f9c5f52e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-apiserver@sha256:62452767feb261f7bd89c6257bbab443aa43ffff6c9d44ee755852fb8b8ade9f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-apiserver@sha256:c9a52de8cd8cec658c42500cb15e1ccd3f50e526938e5a85999eba013d4cf8ef |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-apiserver@sha256:b45132e563783d7e69da181afd25210cf211c4caedd2c422e9b818d5677cd096 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-apiserver@sha256:b15c8aaf90fcac6a0df0a3c0ea43905abb200affe6eeb00a79fbc4c9373b69a9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-apiserver@sha256:d6a49ec7443bb1340f996e27db169b14a6212317687185121204186d321b3788 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-apiserver@sha256:1ce1b389eec7775bef86bf513d35683772f793a8a51273db304f076861589a3a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-apiserver@sha256:244239f71b784eb9d24940496f122143907027aa9d4f186ff7093bb88eebe0fd |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-apiserver@sha256:50303bdd7ed45bb3d445e7495c0e3473922e29dff8690a3ed9bb4ae7cc1a1657 |