Sign inSign up
Kubernetes Scheduler (kube-scheduler)

dhi.io/kube-scheduler

Kubernetes Scheduler 1.36.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.36-debian-fips-dev, 1.36-debian13-fips-dev, 1.36-fips-dev, 1.36.5-debian-fips-dev, 1.36.5-debian13-fips-dev, 1.36.5-fips-dev, v1.36.5-fips-dev

Index digest:

sha256:00ad0f0b8269c720a24387892372e2fdce8c17d48648010823d287b2fbe4d087

Manifest digest:

sha256:ad3cc8a911183ae5882008efc017b242152f40103176cbd34c97180b4d2bb9ff

Size

61.57 MB

Last pushed

2 days ago

Vulnerabilities

1
4
0
1
0

Support

Active until Jun 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-scheduler:1.36-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-scheduler:1.36-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-scheduler@sha256:684cf0cc6b7044b549ea2106cb2e88b8868cb78da80a3981b06a738f5f8ef9d5
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-scheduler@sha256:3b0e2991aaa7025f3954254b0dd1480ddc44317776ce6e231478e452676be560
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-scheduler@sha256:d505bcdb60cdfe5580d31d612c140ae1bada6af3f7cf93a25c839055099ba885
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-scheduler@sha256:fa2bdce966ab23d65d866d211243eea3f765c32731644cad1089a08e7f422f93
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-scheduler@sha256:00a92ee7d08a6522988b416e39ac840737bfb97a060491284e1cd05902c9615c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-scheduler@sha256:12d79b39b32c64ee358104dfbd6663964cf607404fd4b7efbcb5b5ad4b418a7c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-scheduler@sha256:88f0e9b2eaf52a37d76684509d73b7c87270347856942e97735fc8c0b707b527
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-scheduler@sha256:e4ffb38c1a472d3a622d5015e9519641c451964eacf45cb94166723b20136c8e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-scheduler@sha256:46ba877d432594204365a4c89ddfc15e51da7523fcf442ca8d71acc9c22232e2
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-scheduler@sha256:b390ca6afaafab72645c170731e33a5fac9d8ea9297e98986ebbade856b441b3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-scheduler@sha256:ab099e31c6d31b1a237fa540afccfc3ae888b26a48423ace3c6863e8c0a68124
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-scheduler@sha256:79c851a0a565c41d5debd146aa2cfd8522c2a8840fedb4e2640146f425056dfe
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-scheduler@sha256:1c6db0ef4f743e33a9a8746a88c6b60479d2a2bc40932bca9a2ca7b87a8fdac3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-scheduler@sha256:e811bc964acc3c44f4398fd266e9d456ba48f4227c229b70e3a58ba733f86cb9
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-scheduler@sha256:f750af0e86a71cd9e7fe40daeba53d3b918f6fd242d4d5ec9d8a0a124a81ddaa
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-scheduler@sha256:bf6dacc93775282b2789ecb4d8a84dea5a40a1fc6718ec13f05645a883afa600
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-scheduler@sha256:a39fbc4aa7dbe6fc2f57f8949a26b1814edf5beb2fbee006b1f4c1437fd774d8