dhi.io/kube-apiserver
Kubernetes API Server 1.34.x
1.34, 1.34-debian, 1.34-debian13, 1.34.12, 1.34.12-debian, 1.34.12-debian13, v1.34.12
sha256:e45206aec8b967428981a61088257be024a1256f72c5df3985d06f6d770d0ed9
Manifest digest:sha256:7f8e03f584740ea27961d4d4d45d3b2b9ae04fe3bd11f7a60e476a616633a18a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-apiserver:1.342. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-apiserver:1.34 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-apiserver@sha256:f634376bbed59c7ceeb960ff8bfa95f3a5cf07770ea88967ed71bed5c9e6d9bf |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-apiserver@sha256:5bc6b8f96aff9194916349f212a06247fcae304c08b01b05217677ecedb424c7 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-apiserver@sha256:91d6354f77b405c4bcb462786ab00562b3dc313176a8c367ef47869a9f60cc08 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-apiserver@sha256:ebe03cdaa7148ff57269e8142c48453158b02a0d76436d48a8837f6ffaf83181 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-apiserver@sha256:71ab598337f4e04bd9c21e9587323af0fa9c88ab941ca6a8c7a52bdc87514137 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-apiserver@sha256:4f22fa9bb673e175bde3f758fff7ea19d604b0fa7a75d579c6b3f68566521a1e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-apiserver@sha256:64ec29b174bfba52b70f6b2b9e25d0bcd34aa79a3047e6b87220a89df8b9c412 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-apiserver@sha256:d9f457fa3064e7103711b5ea973553710fb2b1fa4c517ff7e0cb77a96fbdda36 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-apiserver@sha256:b10d578ae5c7498ef7cfa596592be17c566bacc50d179be169a6079bbdd9f6cd |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-apiserver@sha256:88833b41c453f1c2804ff99c6d4957b376d6c8d5dc7240166f3f5c4874d1f08d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-apiserver@sha256:5d6fd9257a2a00b0801b6f388ab71981c7cd422d841045daa8cd91ed0f7a8a66 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-apiserver@sha256:ef342c63590de4de8ff45eea9524f3aae36e3813c6c48b8b51b5c5f13898a273 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-apiserver@sha256:c0b19e8a8962092dd1b70d7c72c16f0acf2ceb4d90bec2435127514b9f207849 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-apiserver@sha256:fde8189a76545c565cbd7a019d76f8c1de0cf9135cb172cfbc3890531028f01f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-apiserver@sha256:bdf835746b3fb572989514b7603cb0d52a42ea70c4d8c3de691a2a47cfbd7c45 |