dhi.io/kubectl
kubectl 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.12-debian-dev, 1.34.12-debian13-dev, 1.34.12-dev
sha256:538f9ae5f2a29cd9606f1354d9e5857205bf1d7962aeab0775ea99200cd4fa58
Manifest digest:sha256:11c4e7dcd4b0c62aac2ce67e889abeaeed35ed7ad6362063f54f45a3451fb7ad
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubectl:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubectl:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubectl@sha256:4af83262d57fd9e5d02c5df962967bc297f8ea7d91a71e58a11a56677d803f4f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubectl@sha256:fcceb37f2354c790e943c0492d7e4865abac4ac442aa44834f8f136df8f1b096 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubectl@sha256:9b99a770601d780969565e32db5605b22cbdb23e16c616b2c67f9ed162739cbe |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubectl@sha256:d62f8f69748a1cd420bbd6dafb6e387bbd55214bbb18d04e2468d0f795de827c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubectl@sha256:00e38e5b4a12b36835b8d6ca2c318e0c5c3dc42490d66c365da43b7899e6835b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubectl@sha256:e53661a973422efcbc7daf7102a9a7aa029ff9616e14b737b8007735a22d4c59 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubectl@sha256:368af94af05b38865a78c10cfd092bc932110f1e84cce43f167a6eb2801a307d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubectl@sha256:3cc8b5016c0c43ae2c2ccafcdd3823b29a62d5a5d9768806b3ed0fe3d0bf72d4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubectl@sha256:b767cfcb0cb773a85a82a86508fac98db0c3c6bffa7a32c86f06964eb7b1ac70 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubectl@sha256:1dcde56f50ae4fa59f0f0347f6c04b5442374ca02d5d13e3eebf8a18af48d4fc |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubectl@sha256:a5004866a560869fa2cdbcf1565adacc9bae182f3532d0e30c9daf8314715a60 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubectl@sha256:c716b342227663e56ca845d9b19af2041b09e6b05ca649890bc54c1e74930d1c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubectl@sha256:910b1e9203e6290919df0cc06300004a5fb37a02be715d495779b406f862805e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubectl@sha256:91efd53dac73451385e4488b2c94bf4d6925409f6a721fe403c63208a2ac7ada |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubectl@sha256:03d7e686226a7cd8b4e4d8b03c380969af9bb96315760d4f55bf2770ea477d40 |