dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (fips, dev)
1.34-alpine-fips-dev, 1.34-alpine3.24-fips-dev, 1.34.13-alpine-fips-dev, 1.34.13-alpine3.24-fips-dev
sha256:8f040a3e106a84c158c26e0945f52474879245baaf2199d92118e405352ba6c8
Manifest digest:sha256:79ffad3358af4d9d419c897917009ce6ba3bbc6108da181b822b8fdb0deee3e2
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:f2b74becb2c5f6be801c2e3b5c24cabebfc3e5ee94f68af9058f0cb74c0ac892 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:0fbcf0fc67e345b8c4ae0d0573a298f051efe6cdd1ea25ba7bd075bb51156773 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-proxy@sha256:dce9e729a9b4bd63180a413863b387e5f7d037dd177c3a84807094e208caff94 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:cb41e8e563b57efa25cd8845c06340b69066029d5e54453becbc54758b67ae95 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-proxy@sha256:8f527577eebc70a7e165fc8feafae3daa4ee68dea2c09200d55fd4af7e133bf2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:494f77efcf00e97f6b78f26a7d01db8dd9d834c671647a8abf100b00c176c556 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:58586f81027642ecd806fcd0052ff06496e0884f4879b45c0505a65d8f33ebad |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:416932de93d7e608d008630a400b72078f1b2282c8c142f6341d7149709d2837 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:5a886200ce787444a29f1980f37d17464070ad6294efb04c50f024ad50f841eb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:ca998233f1a0a56ce2c1a2221a3f1857e35f9925fffcb9a54b798180be463505 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:0878854c065b0a5a05148d6a42d203f7d96eed1c3821df5307ca5e00c2c037d1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:f2cb26e0e09643e1355ec639b84ae1f82a2299f726306f811404ba053828d44c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:5b8e0192e09a94aad549e033c2e1fe516e163999127102de54c6d3c8740c193a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:11d7e02d19033cc557d99e527260b73649160a2f262e6e739d3fc372eec8f186 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:07fd1a2d79cbb6bba625f1b57f061daa4f04af0092ef3be0c83d4c69cf02d778 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:47324ec8e28911e171f92b002eb7b077e4f544ccaa76c41c42c52e95f2863c42 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:7490a51bb23f73aa9a7edb0a6c9852d23f82f3abaf980c1e23d80dd272af1a75 |