dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev, v1.34.13-dev
sha256:942423a0f7a125082cd564fe9c4afa5a89a80e48e41cba0e92e9ae1a91d039fe
Manifest digest:sha256:8e63ecf7b8b7f727ef184fe558d4069c8ed07280ad9dfa27cb81976b6280b609
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:f6fc75e29abbb5b0c2e0b823c273a388299eb2f0d5368d627592eea1354944fb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:61856289849329513b0de6b9ce58e242e0f1109601b22c4d60745ee46751149a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:a95e4352e366d2c4fc2bb71a58c4a38fd605c6bb4ba43f9cf90ca97a834640c0 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:c3e4f772901b8748faf324bb178177ef46250285308e58da27ba70c084a6beda |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:6c6ec737bcf8c5b29a1c2690646fe0d352e2f3325344fe506a0fa67ad4a452fb |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:e5dff52cb43861bfa818775e7b87041869617a70d4a1f33a18674181b4da4959 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:7fbd163efc1c613bcd3236206443e7312e139584ab7df2a4703fcf1be79d04c6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:87f5670e88b33103159f68fb0a5304cd76d9dc75c9927167231343f11c911981 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:592ab7df58912431ef42f61714d90bb4b84ba51db64489a1b739c014f5d13020 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:dc0ee60f83772ca1edbb84862165019f87c07aa183d9e1c9347126267806560c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:76536f55cc32c86698f4f8d45b8e00fd22dd6da367f874968cb94860f6c4652a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:8b896267718d305305b21ca7f929076ea005f37792aabccda6d6492004f26299 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:f906bc4d43b4601d09889c67236dc76572bd84fe3d73bef04efe2418bb2a2d4c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:4bcbd27b0ad323cba12ecebebb5dbd30f74bf793dbf9951e83f8dde4112fbc37 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:a958ae5b4dbcad18cf755c6da415271f8ddfa218675409cbb10f6dbf9e7ce4cd |