Sign inSign up
Kubernetes Scheduler (kube-scheduler)

dhi.io/kube-scheduler

Kubernetes Scheduler 1.36.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.36-debian-fips-dev, 1.36-debian13-fips-dev, 1.36-fips-dev, 1.36.5-debian-fips-dev, 1.36.5-debian13-fips-dev, 1.36.5-fips-dev, v1.36.5-fips-dev

Index digest:

sha256:f7ea6b7940ce73171631f2dcf98e4662174102ce6582819f11c55d9742688296

Manifest digest:

sha256:b5890b46b75c6fcc611e8cf1f7ce245de375aab6c051668d6fdd4e4372cf9a17

Size

61.57 MB

Last pushed

8 hours ago

Vulnerabilities

0
0
0
2
1

Support

Active until Jun 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-scheduler:1.36-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-scheduler:1.36-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-scheduler@sha256:4ee540e1849dfbe6ae00d0ac775cc5442eb5cfabe25e112aa1e2f6fc36c05d91
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-scheduler@sha256:641bddc346112b77f7fc8cf4c3df269cd567728290ed98d0776ba838320c4830
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-scheduler@sha256:ca1cd725b03896038f52af413d06b6482b29e7a53a6120d901a910826f851b76
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-scheduler@sha256:4223cc3087a0b378a6dd43788ec1f73bddb61e59219e3052343f06a568dedfef
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-scheduler@sha256:9b487a6cb36258d6d17aebd1cd6b0f8dacdcc60aacea8bbdc7f3b658901c0a97
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-scheduler@sha256:d0bad19f9bcec1d572959d29c6dc0bcde47797635dc8113351efe755ba3bb233
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-scheduler@sha256:07df023a7623dd624e90d159869f65c8e04263714a03cd54f2e17c80bcd4a9bd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-scheduler@sha256:aad227b1c97351672e1add2e7e4ec7c3e8c09b873cfb2a31b18a0f047d9a0051
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-scheduler@sha256:96e0ddfb632fd9d8b680aa9c3a92118086fd2e3c81f997fdc9143a1132dd21ae
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-scheduler@sha256:ba0bb24e11d11948629d4973d72c3a5fdf4bd1cfede76a6d9c50f66ce26f12bd
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-scheduler@sha256:cc4acc35b4c506e96c7407517834bcbfe720deeecca89a0e7a89a4e75fa30a4d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-scheduler@sha256:264af44ea0506cc80425b4443e5758ea62f0f4bcb5b4a68fb832bcb098781a5b
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-scheduler@sha256:5b888a311351934b501e0df6fc05b0e36b89389c28969c1eda67bdf71011509f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-scheduler@sha256:3f72e4dcfcaefe672bba891e125556e238735ba0304b1a469bffbd4b88c703cd
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-scheduler@sha256:52a77afcf97ed70af4d5cb363cb2cf4234b77886f2f4cc29f29f9745e7cf37a2
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-scheduler@sha256:f4e3576d92358ec5cd31a462e34efe82c3a41b3065ccbddc89619020a6749682
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-scheduler@sha256:202b49456f744295b594ab3b3636e6f22257bf82391ca1a94814afc137062dae