dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.13-debian-dev, 1.34.13-debian13-dev, 1.34.13-dev, v1.34.13-dev
sha256:ee96bf1b77ed49ca701da9b06cbbb54d94e8a66a719bc822966a0074e40e0a59
Manifest digest:sha256:946eb2e80eece7a1fb66bbfcaf36191b9c40592c06ed5bbe7139a9e9f13dbf4d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:65aa4beda977404c1a008afca4ef56215cb75ed18929e89e389dfcfe137c30d7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:0879f5b270941d4430623fe1001361815289bc62f097e1d760199eb3544cf65a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:b8962a78f015e2399d1f80f908cc9a397e79cb516d24b7f6b93e8e15219a66b9 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:9fe84d097517928a46cfe055628b4fd62f66e9a283a4a93aac00b60787a7c749 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:823adcad5c55c426146d9a60b2480d7bfaa11d8036858a120f34c3a8f1811ced |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:676bb87dd3a543fc256b7878be01526b970d657ebbc2c0578856167979441ee2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:c9bd926db0cdadd6572b9d6b4fb46459e5f4e5583303fb4ed79466626aac104e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:c08cc8a9e3a901af15e13119dd52662fafc4d76cc792dd34dc12186f0039180f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:c2a8af1188f19c474baa5238cfc6bee5755f80591246796e506bc4ff37067895 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:827ec84044bd5d74d453835ed8f95a3ba9a90e838370dbe24771db9229412e6e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:2bbb5cd4dc5e98b2fe8d8bf3dbc03c7deee34e4f3a5069a119880ed982101df0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:16a4cfb8b36b528197859624856f617845414c6aefcf643e8d544a2b25bc0ac8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:8f76f5cfe596b1ebae7bdd6f63774c6e7c4ceb6bf1e0e6cc97df9e0344e38dfe |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:844b8b77eb8a38f72b8b99d1eb500a70f0ce3b31adab6e7b13b6e2333ca4f3fb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:2e9999fdb769a55bf4c5380654bf6b63e86338a6cb2b07079ff5af09d8e08f35 |