dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (dev)
1.34-alpine-dev, 1.34-alpine3.24-dev, 1.34.13-alpine-dev, 1.34.13-alpine3.24-dev
sha256:092cbf13ebb4717101a07be7973e5bb33a103beed67a45810a8364ba6cffd41e
Manifest digest:sha256:a0b78218e4cf49ef13ae5593ba44d5b617ae6ca796d5304dff36bba646e67b6d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:83c8c3facfbc5515db8cdd25b64cc060ba31b440ac316e7ad8b08c02a24cf59d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:e40d1b487ccb03813dc869239ac88bde394817bd84c7a06948ab62761314373b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:971a474507243a5601526dd93fcb003da432bec507f5a468ecc3eb50af1975ff |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:669df565276469f4879c1b89e5f6553b1449e0f6011619957ed2fd92c9433829 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:9131460eacdd44c1ec43ae2d463052abca1cb7317528eb9217d5637563c73f5b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:3146fc4fa047331ff2dd450f8f5e77013db2e85e6b2322a5a1833a9762781601 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:ea6cd62a47d36899c90bbdf0ed7beeed46111fa0dcefd80e835d17b4d8c8827d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:13ab28b69016e428331e33f7154badf7d445e709ad7a51cd468a0b9cdb3b583a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:5384a8e758060c3ec34f3b4f5e7fb6e223cf296d40c4a403e4f819f008678df7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:22bcd851a36835a9882f1e4b0cb6b303cc3fd7238b37bab2a3ea027b813a87d3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:01f555dab916f0253b35d45dfde537d59d5770d21c467cfa67e7c92b1bf8d2c1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:f47c89b67937f4d93fffae057d33481c61b7901882eb77d4d9a82f73bd891d06 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:cf6ce07a849abce285a49ee558b80f1be8a7cf8148009959af1378dec3ab87be |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:6c734a88a5b626a423409a77c0bcfb49214dfe53a4c404fc128ce62a39e34d6b |