dhi.io/kube-scheduler
Kubernetes Scheduler 1.34.x (fips)
1.34-debian-fips, 1.34-debian13-fips, 1.34-fips, 1.34.13-debian-fips, 1.34.13-debian13-fips, 1.34.13-fips, v1.34.13-fips
sha256:25816a6ed7891cffacc115600cb84ab710d566eb995b458442399a6b975f670d
Manifest digest:sha256:d3c94c48141b471cc12b7e5a92d5b2ce2c951cf0f5cd2a0db5b7741117c5c888
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-scheduler:1.34-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-scheduler:1.34-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-scheduler@sha256:ea2008bd51cc7a9ccf133dd211cf0ee72ed19494e3a2257e36ff846a403ccf58 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-scheduler@sha256:07e4952b330195c29495d45f8d8be2448337ced4882e05175c297f7c74b205dc |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-scheduler@sha256:e69a112c7f69e23d85399be7ff18ff268a94affc20708c1721d9ad9c4fd8da19 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-scheduler@sha256:64dba29b758961e910d21d3832b44a329d71f9d9ea0c07c684a6f3e8c5a58d3b |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-scheduler@sha256:48a4915ed49738f6c9a3899e9b44f531b4bf03eebb5b854e3bbb40618b9077ff |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-scheduler@sha256:b3b390d7d0132478ba11ec31e13e516323c2a09362f6c5cb97b28ae7be6037da |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-scheduler@sha256:27405c41c772688cbfeca12167da4e4e3fb1c288531777676e6656247c5a8298 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-scheduler@sha256:b6f53d112e02c0a78050e91dfbeafcce0ed8aea284ad3d24a71ee0c1934efef2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-scheduler@sha256:47cc0b4a1a07ccbd4538e18fa048fac7006ddcc7afae8c7e4a1a78dc7021568f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-scheduler@sha256:b38fc729a718be91f5645b515f3b108d6a0ebac6df49c9b781c9a6e472e80217 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-scheduler@sha256:77670c9f99b5380556f1b0f51a8a5baa0ceb9e6510753d4b9921c48ad51ce87a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-scheduler@sha256:2777086b0400a5fe45269142642be4b53de32a0db63717ca86a0de24175d1090 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-scheduler@sha256:555dd0afc1594ba075f84290aea90e7b6971cdc4ecbceef171a309710cd9fef7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-scheduler@sha256:931144eff5d77cebc93bcff5dbaf505e7870ff7f7925551a78a46ca8954c199c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-scheduler@sha256:93a7dfc6b752fad02405c865c0c2c4ac9b89ec43963707a69b9ac84bc1cac041 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-scheduler@sha256:bd90222aad50307a265ca020265b04aee4c8aa4d1d0848ca9134a78cb972f323 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-scheduler@sha256:bd0cff991e9b247db7814af9beb1d1985ff38089865fb739342ae404551b8fc5 |