Sign inSign up
Kubernetes Scheduler (kube-scheduler)

dhi.io/kube-scheduler

Kubernetes Scheduler 1.37.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.37-debian-fips, 1.37-debian13-fips, 1.37-fips, 1.37.2-debian-fips, 1.37.2-debian13-fips, 1.37.2-fips, v1.37.2-fips

Index digest:

sha256:3d6798956ee26a4533559180156cfe2c6a37bce44927e0213c5269e7ae37c36b

Manifest digest:

sha256:a6c0783d805b4816475602d1a3cea18e5b01d98a2cdccd2da8775064e06631d9

Size

27.82 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
0
5

Support

Active until Oct 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-scheduler:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-scheduler:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-scheduler@sha256:7c77ca561b17bdf09e1414efa804fb6a94f4af41e0887dcba25eca81401d7ad0
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-scheduler@sha256:2daa8e24e8f015ddfe39a061c5b96c322303dc9d69b938f5753730e5fa6d2f30
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-scheduler@sha256:1d3ff68add626576265f15fb9934025d07d9c1138e5ef9745f5f3b41e93af327
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-scheduler@sha256:20a056b092b5c311090033cb7f25610f37e74b68fe74b88a870875a8513301bb
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-scheduler@sha256:bdf37cccb026aac9aeb2b13af0c06d33166465f88a80a39864732840688503fa
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-scheduler@sha256:2c12e1317a35330fd46070d67d4f2b6191ccbaec439f9bbd602b9ec4c20866e6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-scheduler@sha256:3f0071478447050f5413d5a92190a6e5087b58cdde837d6f44ac84dffcd7bdb7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-scheduler@sha256:5a32e6575006c83cf49bdab44b7a03e58ecdaae08163246209fd955fa198f64d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-scheduler@sha256:9d75844a20082a8f9b0244acb57f3406e28bf6cbff041f034efdd84bfedaabbf
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-scheduler@sha256:0f58e459c2302dcfe89c8392f725aa38d41841cfeb4dcb6a6aa940e36efe2ffa
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-scheduler@sha256:054a61da99ae49c8940d08d4bea42d3cd9ab001da084f4ff1f29c5314aa411da
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-scheduler@sha256:9a4042cd26ac486e1198d40e94c02531ab3656e089c2c54f074ef0c62379e85b
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-scheduler@sha256:8fb83bf3e95c961ff486826463f3eda08fd831c735a85f7f032f5be2f1f09737
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-scheduler@sha256:dbbd5ce186caa5b6bdbf325c06e7b8f3baf11a43cb289928a7929376cbaa795d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-scheduler@sha256:16e55d02361859ac29493ad41f41d4253c896f9f56dbd3feb17ec6e62281545e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-scheduler@sha256:7c6947a3db36e82f8e86b25688ad41bbcff2c999f3b77f2c7be13a81514c9837
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-scheduler@sha256:1e60f325dbc8d4160e12362ccf99e6bab4ca405c9b12ad39c8cf1fe68556d53b