dhi.io/kube-apiserver
Kubernetes API Server 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev, v1.34.13-dev
sha256:32e770391d1a0b7a2061796ea855f18a5fc61282ee0913c0f651160cb52e6afc
Manifest digest:sha256:1479d578200e86f0ba0f998aff3e27cd1e246cc33b86a04f4c9a96b8eb08ea6a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-apiserver:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-apiserver:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-apiserver@sha256:0df381deeef4620e1f5aa197e2901c0e52a25d5c551cffaabc56a2ff5363fd44 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-apiserver@sha256:969a16670feadf376464ae3e1b40d6b2f8b6072bdbcb47d35f905ee8781635ae |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-apiserver@sha256:6b090902188098266bc04af98e326881774264918d0e99bee83c27c90aa84780 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-apiserver@sha256:64d66eb07273e979f379dcb75f8481dc20854828a5c46f61d02cbc870dc8ca7c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-apiserver@sha256:e315f9a028c7cf55af4b63002305d8592382c9aad6db70d2285e6e014d83b247 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-apiserver@sha256:424498a8855aef70a911b4be7518642fb89a6ff0ab990215dd02a5b20ee60173 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-apiserver@sha256:e6ed70d0b12c137507cca6ff3dd8f098b159dcc6ad8df6ed1d4bbc358f3542f5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-apiserver@sha256:0eb598d39592d7f90d9da023ed558d09cb0b330e96b5ada2ac6fc19140481cc5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-apiserver@sha256:c6a36ecf7784f36a81e95a41d931ea6baa77538fe571cc4598bb082a11827fcf |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-apiserver@sha256:d9d54700ecdb2274730618fecd1df26a70cb7514ab5269e1d555cd47aa343775 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-apiserver@sha256:5ab9cda03a5d369e5fca77cedc568ee71783b76fed272dbc04a0c95395941f60 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-apiserver@sha256:2a62db8d35632b23f0fe3c115e7c03593e590ad7acf8ba0634dcfff664d07983 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-apiserver@sha256:e296d20efbcef023ba4b917dc08612b7aac8dfd1c71fb9c07284a16e520ebb91 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-apiserver@sha256:d1928701070227bd6398885511d0d4a63de88c6a15b8bbba814f7202ebceb083 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-apiserver@sha256:82c9065194aa6e8b29cce7da72198ee8257252228b69cb3cdd06536138c761f5 |