dhi.io/kube-controller-manager
Kubernetes Controller Manager 1.34.x
1.34, 1.34-debian, 1.34-debian13, 1.34.12, 1.34.12-debian, 1.34.12-debian13, v1.34.12
sha256:78d9f0ba272d5b326fd5dc832c31d973a48e1025b930c1853881c9e8a839f916
Manifest digest:sha256:491b095d514d5de46781b1285dabb1b60fea902f623ab1b0e17d4feef3b4f264
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-controller-manager:1.342. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-controller-manager:1.34 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-controller-manager@sha256:39283c7d4faffed80cd0e7e9c19ac4fb5db853da6c543a2e19a7d99bc028ac68 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-controller-manager@sha256:5a28e6d8acc4338f901a2652e736790022c99ed64bf0b0840dcf6d8ece3efe11 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-controller-manager@sha256:c66b83602fda7c5eead4782d94c9cf4746d8c90a6355e5710a2493ada8397005 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-controller-manager@sha256:1b40c96bb2e42fe814e5d403bedfb5382c8efb6adb28e2ec0194148ed5072a72 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-controller-manager@sha256:2fca217054cc2cd32bc5e8a2cf23009458860b82b55f0b2c34b5f291bc2d1eae |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-controller-manager@sha256:01a381c971e7a4a815a87e154d747f3b0f23d0da16530510f6a24d1a80f7c61f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-controller-manager@sha256:bae2e5401eafbecae019858228dc23044e0d194d232445b1532d5363a4651f76 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-controller-manager@sha256:176e7ac12ef833c9eead5b68d52732a032c74d3891664c0da950091057e9a361 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-controller-manager@sha256:1a4830942ec90df96ef65f4fbe2b8780e82411fb1a033a939b3a3ca6321ab384 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-controller-manager@sha256:1817e15bafb3d65fd1400986429002403f23162203ae185d874fc7a0ed6ce275 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-controller-manager@sha256:d97f3cd28417e6918cbc7c584e01af078d8a6a688e29d837dea5e57a1206e2c8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-controller-manager@sha256:39464fd0f8621cc5842deca03ce9946ff405b3b2a102855131ec467f43cfe25e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-controller-manager@sha256:b50ebc37a307b1c5a7acdc3a3a20f69528e0e9ed6b1749347e0fafb21754da04 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-controller-manager@sha256:8ad9a24e67842e4d445080c6a21f0eb5a9e957d054c528a888f6bfbe3714a5d8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-controller-manager@sha256:412f1f6faccc4dfc77330a84c4fb8e8ec0f00cfe9c8779a3f3feb73dea2a52ee |