dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev, v1.34.13-dev
sha256:28ad24d2941e437f0ad8297ca6569ce44dae59f1dee251e0491f09f62e9cb69d
Manifest digest:sha256:2d67d65b8052b379a9737d3765da4d92f1795f2e8ef01a3ac668bdeaca43f473
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:d9b53056d741c0932efe8c78620b06b2406332d19adf171842adab6a9caa53cb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:3cd9079f05bc56d1883809a48948517b13352f9da74b19ed0085c0fe5c427711 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:051cb9f4d5ba28679e18b7ddc59136be810877d332a234e9c199db8a6cbf6bb7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:9d83f09af4965680b8473ee2eefe356d612a077659aebe322aa41f567edc36f7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:49037fb1ffd89920dbf2deb1d96bb8cfede5be226cc537690ce0836b99fbb8dd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:0b63aa382e167c99f5e8df569e92b4a1a1c898355f1a13744771f611477ac2bf |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:bad4e51306b44ede7d802bf50c22e0135c6ca70dbb81353feacbc3d2bf4453b9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:9b3e4e18b3a38ff1fb7d14cd5471b3d3ffa4be5e9e131e5b31e56654c7132ea1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:5c8c8c51050c779f10a00b456eb746e6a15a2dbf5182b30852ffa737aa40bcee |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:f295e4bb330a2e12ba1e66faba058660f073866fb7a4efe65358a0d3271f10c9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:5424b066f3aa7a4a2007f51896e2813c9fb81daabef7a3c9df305a8ff84eef1a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:c5afef35603e3a8e3450271c1bb0af7a6fbb82b427968c7a52388b3272c09f35 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:a3db5da90895c2f26de9b38f52abe4c53ae7f5f2d4b31f242bc43a9f2c379600 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:40161330be46d59f4f15fc278d480b1e25b81984a39af9dbc98d3d120d15bd80 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:8252392e78bc07fe9f2aa0365a436b19689d04fe247927e072c307f997cad9d7 |