dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-alpine-fips-dev, 1.34-alpine3.24-fips-dev, 1.34.13-alpine-fips-dev, 1.34.13-alpine3.24-fips-dev
sha256:028ef5d8832decf500c9a678e4627593d5768e724fdbe4145fbd3367cee2bda0
Manifest digest:sha256:ebe0ac0ccb8428cd49265ead33d6844e51dd126a97b5e5b66685a269e404ace1
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:57eac45b04d16d5296f6d113179fe01873e031d8a72d6e3668ca5a8a142a1cc7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:fb8e538fddbd88bb03c9d5a8f9571a86166567227aae7aa091879dc0e20d7589 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:777a113d9546cd368798b77772589721eac8543ba803465ed5bf7801fe547d87 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:7126da4d6bec9319fdd222101f9defd20c87020531d0a7fe885adb4e11c9d54c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:fe39b9ac9e1372e708c1989b53eccd19c3c0bf36ac01138e592c7493508f878b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:d70edb2281429666f65eccf45001bbff860b37729469481bcb489b6ca77b67a7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:f3a0c71811206f6b37853b038c4562b8a6b11298514ea08171ec71ad35d7ff89 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:0ad34b3bd6c20df7ab37dad15bb692b4775ac49a5c5f3c77dbbee4c549b025d0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:91ce5b871365d35ca0fd2f7cedd0119bbb4786ff939bba79ecfb582dd247bd66 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:8fd9a4f4b059b4a2ffbb513766a51bb665ae8c139233d0a6cfee05c0a8e346b5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:ff9ae8ac93d83f8794456d1a696608670c01c4215e20da043b4e439e9799458c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:d27d08712f41ead59cf91d9de07be6bc7fd65c8bb54405e3bf769b7577f14a05 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:2612ef0c4bf4b645f8962255bb30e8e3777d26518c261d5e852582b869fbc847 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:e7db1935f58a8dc8155f889ab980f63480083791de8e9cef871ebccc86eca6d4 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:7ce38f36e53df65777141c0da696acbb159e13297d987dbb2bf854d4260f6162 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:cd327093162653856179cc58e3a55154e868d45324df85677450828a12d733cc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:87834a00ca1d56c9a1b5655b6f2c7b1b211f2347ea0a9dbde24db9acf722bdf0 |