dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (fips, dev)
1.34-alpine-fips-dev, 1.34-alpine3.24-fips-dev, 1.34.12-alpine-fips-dev, 1.34.12-alpine3.24-fips-dev
sha256:51550a111031df886009dc4dcd58e8253fb52c7730206cd9bb2edb0a8cfba960
Manifest digest:sha256:ea30dc60d7f74518bca0a6abaf85912bd3879ddb344f0fe55f2c400a4c478979
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:fa143c70b39acf7f1d538dae4d5b1b4063528dc2f414c90c7448c8b5c01d6dba |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:15d91df0c23e677e7240f0c635bf5b5c67b0311f82d08ac47fd3309430b7ca48 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-proxy@sha256:b43d9a7bd694c10295f406d34fd1b92738b8f0e16d62558a51f210aa65c98d2d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:ca332f28c2031f70781758dce5117958407a144539cae83e71c27cc7a15a34dd |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-proxy@sha256:75ad907804cc8ed7c2d2ee3a771e7af33840ab17c1445d097186a37b87dbd46a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:a376a7c0cee53ffeb49d383cc522bb12f78924bd6fc6fb5a52b068d1604d2fd3 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:a952c20be8a30029a2a080bb4375aaed466d66154312fe6282d1e64c23eb9530 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:e1578b3b48bfdfd6776288154eac61c6245c71801b6d8731be836f602bed71bd |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:d71bbaf2f1324c131efa5a84b602b1efbbd37ac5eb63befc70ee1ad72d0acf78 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:66814a476a26c7bfb751b1493f372fe287a4b14932410c0a8d0cdfd1183e55df |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:59b8babfbacfac303165c49852a7716f89741897b5d8f9f7da3467b741b33264 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:1bc5a219cab2c5ffec2cb7fe67702885cbd393636e597e2e2e777c0adb89bb60 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:20c496b4f5fe266ded002efab85a47b138b0379265a61911dfa97ca4f995cd83 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:eacfb0649db0eb40e882fdc5f2581f95b592ff675efb8e10feac44d0c56ae66c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:3ed8505826dc05aca16384824ad85fe20266d861686001ea6eab957c0581035e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:8cefd933bbd199d55f087f35097c6e6989bb16e533fc7f22d62737832697f369 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:142a8c3fdc8d1f5c358c2ac80f205826736d6b5fdf50b91e3774c1328cd2bb3c |