dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x
1.32, 1.32-debian, 1.32-debian13, 1.32.7, 1.32.7-debian, 1.32.7-debian13
sha256:0318b7c730566b38f451a4a8b9d6970e08977285337c84412473ca09ccc6a4ba
Manifest digest:sha256:ff2fc28f7caf20268012145b4072fb636e8cf981e3b1cab35b70feb4938a7425
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.322. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:05d5554dae99deefdcc168bda4e84a32c722cc03ce3413da2d0ab82bb2becc0c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b5cf1ead9528372b526b9dfc778a7af2f43773b9c446c72e512825ec87c1fdc8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:6ca0f97242e948ea300644963bdacd8fbb93a09538950726da46affff675f729 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:ea66117a80e163531e6d628484a12b7c4d2e70e9e60bfe5ec80232cf240d565e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:3da59701b4071f807ce67e11202d095617774a18a1a514f1f5bc6f1f35c007e5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c61948a7270cbb469ea9fe266937798e4cdf55621dd8e92c1ac71fb0ef253288 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f2a5064655ebe192556afee51e300d76d6d7f1b151fe4aea51b0ce77852240f8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:3ea694d08e162f74bc8a9bd14bdb850abc884ecb12fabd68da8531b044189517 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a5f0f2f05c2adf48a62447bdf1501b0f211ba9dbf30e6c22b598db61e37b1657 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:58bb1a394e6b3239d820f659f6146c97886a398e51e4e8f2eae99daeb79b43c2 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:9cbec85b15478c43c56b587330c2a37dd17726d8ff863144019a8f201dcb40a1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:11ef4e300d187924df818d5ac23203f0433a58a01cad0224ad1b77f9e2a43d99 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:fd5d10a4a9b0892a50f312e2b162fa3c4a279fc539585ffa94146f370b7a6497 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:cad10a019d17be0fd004fce739e8a69aced346addea11e31892907b639792e6a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:992a9cbefc009a30414df68d57ec46f6607e1f7784ec6eb6b2e3f5bac9f6f933 |