dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.13-debian-fips-dev, 1.34.13-debian13-fips-dev, 1.34.13-fips-dev, v1.34.13-fips-dev
sha256:8ee686e855b1c7b60c755c86f55f0effd63ceac213e538ac6351e929e965978b
Manifest digest:sha256:219ed6fe9ddf99e55c8a68526b190ff1368c6d8ef5f05535e2e31e07d316343d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:4f71785a4ef60cf1415b056cdcd0e63dd985418c066cb94d5e8e507901fccd1b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:1babbf647ceacc022640d796c0fe156ab4060928a68cf891a2cc2d522e2e8c1d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-controller-manager@sha256:5c210e436b126a12a67aee09a95006aea5010c29432021a74444959eb6c335ab |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:15fa1bec33d7badc5d68491e36fbbfa318ff1a1b3e80879f06de73c8d5f72536 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-controller-manager@sha256:24a4f4492e90ca96d665eb6eddb8c36d5f538c5a960b724e104384dabcb8d105 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:83d85bdcfb6a60c19d6326da5abf6cc08be085053f04c2520453d5fcf0a49c94 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:687fd61e5641c74a52984e61c12d0bb3259f9c81a2935fa29deed96e90f01580 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:e936beb3ae44f1d7ea9085d857687bff6f4bfacde21f060fc9023b3e33707eee |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:ef05a258d5b384a30630aa62568f5ca0400f5ff975d2f49fbcad4b3239772ffe |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:867ce61cf335a42127ae592e3c4a6b316807e35ac1bc906cd05f2f6173fae389 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:ef29af25106ce7762ee83aac10447ac525ec168fa016c5670104bb4aa9905b7f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:17b9a293ba3a6230b1c9e94d02655938ef614d45ccb768fc778c81f32a207113 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:96b358cac3a6ed8a15ad397f9f611721c0cf9e1efefee5380f00657350e74928 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:4ef3a919c1b5542af6d2da93e5189e0f1e4c161f852016ddfe03333402ccdf18 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:1cde584917c636490b747f0b33a02656021afc9aeee036516466e3cf50e54793 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:78bd5d3a46a70958e64c4983702fcd99c746637dd2dbe2062dd620100a7b581c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:a7ed1122e5be288dd18b2028e8362210e60ba5555f0023af8b29a3b2fdfd4b8e |