dhi.io/kube-proxy
Kubernetes Proxy 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.12-debian-fips-dev, 1.34.12-debian13-fips-dev, 1.34.12-fips-dev, v1.34.12-fips-dev
sha256:7d077a8d949142811a0ab886ef7c1fe8525552c8027acdfebdb5eb844aeb0b04
Manifest digest:sha256:83e3990025edefd2bc995cc85dbf97e64224c1bf159fdeeffca1c7081ec88f87
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-proxy:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-proxy:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-proxy@sha256:837489f1ea1b17e02fb06c5522317f9a2d48c308549fb0f0abac022fc7035677 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-proxy@sha256:bdb23b960bee240033f529de8d911b0cf1eb6c7c3b30ddfb543378df30d4f805 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kube-proxy@sha256:539adc160aa6c797ea071b01d0742d2b690c43b56322734c7fb195a71cbbe692 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-proxy@sha256:bbcf6fadbbaaa22aa60b32df2bd07d5527cf2d4e051f43183ded22f7d62d5bca |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kube-proxy@sha256:6e9391ff19dc3d9140e44a8e9e5c27785d56161331a97477cccdb81a0001f21b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-proxy@sha256:de3cf6c92c2a49a922a4659ccea9d288cacd048f9bc399dbda70f409fb7e601b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-proxy@sha256:321db2aa337668bb180f871a293e373c2470209b13461c6f0110f86b923f2bab |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-proxy@sha256:fa40eb65e74d481b3b13a0db93c4ff72abf201e9192cfe7adf4fd001311a656a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-proxy@sha256:a560dddc34b8e73f700c0fbaeae95ef7697a9a7a80eb529a826d7e7b2fe42c6d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-proxy@sha256:9d76518245b6079183745991437e97f6521b09eae067f7ad09c74a5a81456e1c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-proxy@sha256:de2254b2135417d884c8aeb01d8c90811e617c6f52191254707ceb942d215181 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-proxy@sha256:3f6ea9106035c7eb72ef354cdd5c127c120c86a35b0877792dd1c466660e6f64 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-proxy@sha256:50022b8dfb981668b71d873369f499aeaf81de19381fc43fc10b3083dfebab48 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-proxy@sha256:f9a9902dc7f762872c7f379c2825860b4190d8dbe9465565711d45204531ee5c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-proxy@sha256:8952f959528d6483a0bdddb10a1760b96bdac52da7a08004873a910db664303d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-proxy@sha256:00b749f7ffd9e8188ee89e36ec4a6ac9d842c2405dfe14c6cda6f5556712c6ef |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-proxy@sha256:4fd360d9e57f3da2b4e06b199023835b8056ffee6ed62ca3da828bc942ba2129 |