dhi.io/kubectl
kubectl 1.34.x (dev)
1.34-alpine-dev, 1.34-alpine3.23-dev, 1.34.12-alpine-dev, 1.34.12-alpine3.23-dev
sha256:3bb6fb8570bb850ce50e55b38c08d44a768e758858bdb026d686227fe28097ab
Manifest digest:sha256:901b1d62cad09ac662ceefcfdeda1feab25cb666f89f21988cd12a55681d64d7
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubectl:1.34-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubectl:1.34-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubectl@sha256:778298d9b01a0c5fa02b6bb94e2476aeeb721276de24d2bcee3dfad2963e233b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubectl@sha256:1b8a6e5f20c63fe7e21ed81e95426747b8d9220d97c1b6da88f54570aa417e0d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubectl@sha256:5d2fa7fe7589c04d0c01bf4d08d795cbc17bb96bf8be9647847cefec422d59ba |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubectl@sha256:b8891992124acbdb5d189dbe570c36a4385fe4ecb64f6f5beee6c03d272743fd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubectl@sha256:c8fffca599b7e90b36357935728e081d52b3164ec9c433e14b61b107aafea86d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubectl@sha256:ea47f07c6efea11f098df7b8d391d321ac4ce0dac71bf5b2af31793f30a4a5c9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubectl@sha256:758c7adbe9daa48ef38c33ef00808e40c0729686b67b1abedfb1f97f4dc6040c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubectl@sha256:4fa4f7260f5dc0bae100a19c442e4daf921989188c9bfd383fca83d6c7ea6944 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubectl@sha256:d904054ff7652c4b876895ac8826ae754b3c6d3bded37ba4cb2b65c757b17146 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubectl@sha256:44ac05aa2bcc5c97a22157e99ac3cf28345d708664723eae944b9c583ef893ee |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubectl@sha256:07df8525771d4ef95530ad14dcea2a1004579b98602767dced3d9d5f97ab76a2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubectl@sha256:b6009b10c82620d203dbdc9128e162f781dca8b214941542407d0f98ff80e0dd |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubectl@sha256:3b19aec361af430932d630a6bc8c691cd73bdd0fd67898a193faf042b2a8776f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubectl@sha256:312f929a14a1fb69e05c654bed05233be408043fa786f4473a7f01dcdc9068f7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubectl@sha256:1163e7e8159b183b64b0ada4aebae24ef933a168ca886b991c9cf79dc238297b |