dhi.io/kube-scheduler
Kubernetes Scheduler 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.12-debian-dev, 1.34.12-debian13-dev, 1.34.12-dev, v1.34.12-dev
sha256:fd6860d44bb4095a3af2059ddcc1d698fd44feda80bdf79524987f40f634c237
Manifest digest:sha256:5cd6e3f12fe5ec8276a4e3584106f5cf8aab2d68c7103cd5f6643cf551d7d7bc
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kube-scheduler:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kube-scheduler:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kube-scheduler@sha256:ded740033ba7a735119483cdcd8fffd74f91a0803d51f2449adc35552ac5fe2d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kube-scheduler@sha256:7b043179b196aeed248c48ea7de478340e59ab00d38072d70c17da9ef996935b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kube-scheduler@sha256:d75db32d41c60b01d7add9dd5014f146dd7a4cba737cfdd5ce4ad26411456261 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kube-scheduler@sha256:027132237e0a92a2c76798c956f72a654d9df0a2f399e5410ae139d75b8d4c55 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kube-scheduler@sha256:bff32426f54419c1a673498fda8b2b57cd42122b6d0c2e6a24734c8bb63afe1c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kube-scheduler@sha256:66e9b1f724d4f28b23815fa26cf257520a6f2f126762693553354ccb3abece51 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kube-scheduler@sha256:1fe29683b901add291e244121a23d55ffdb9b1c5fea31dafdfc0ac8043757b31 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kube-scheduler@sha256:b37d15b969f133c5bba4b90484cb59f0fcbd6e25dde90ebc91874df5f1c413c0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kube-scheduler@sha256:88ca3b047d63a36c38b5c9ffb7be3996a2df661a94e32af976f1a86aabb52189 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kube-scheduler@sha256:b4c09d4178d1ade44993efb662662711e1dbd09930e7b07bcc8615df6c2c7ea9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kube-scheduler@sha256:df95ddbb04fe61937da56a1fdf4dba9ec7f2e8285c44a266df9826207767c96b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kube-scheduler@sha256:4706c045b2fbce71668383a17a450a1a2e1db4fd3380fd301da8c5a56e093c64 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kube-scheduler@sha256:b07bdd1f78df25d733969ab57f013ae18b96015252884e1373d9b46eb7335e79 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kube-scheduler@sha256:964eda402729b621fad37683432d455374241e28e60a52289b97fdf2c6c2b66a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kube-scheduler@sha256:e2b5b3440bcadd53d84164341cb9edd3fc392f2f96e3da4c454a16b3b8f29338 |