dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (dev)
1.32-debian-dev, 1.32-debian13-dev, 1.32-dev, 1.32.7-debian-dev, 1.32.7-debian13-dev, 1.32.7-dev
sha256:9b5b3f7bf1143290922b39340d43c6f23e852e7c8d6b03e746c191bbee36bf5a
Manifest digest:sha256:35b86100ca416b560a491cf376f4e2c18d46651ff6d9bdd9f54ab95a3559707f
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:3ff0f45847b1e06a364473216af1052bdca78d3422aeaa784a53a5eac59060c1 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:25722d490822c10e70b6b457ef2aa1074f8d16c30042b2d16b4dc20f9168f0fe |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:94c31344eff52ec4c7a8599e00b766ae3775e3037f1c86f3efe0e66c3f6d5c20 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:df5e33d220b83c50fdef89e6697907116f515997ff64ab0d8ebc4880cc6c597c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:8c746cc43f0dd328bea771409cd85583bba6a8e0927972abc6479b10f406105c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:cd25a559c0370f2e0db35da8ae501fdd0bfc15f1b132b4b9d36af6cf5aa35ed0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:3792abc154f2a66ac7eac2ba234db1a8421879e8c546f9ad34301d47e93be5d2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:85b99077ee446170943aae99d7131e556c5ddb047e3008d1d2f5807188e47b4a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8cc81d8e41b6b7a5013801727c2f3944ae6641b3f68f3e808cf8af96c5ee5c50 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:15522324f15ea5e308687a8e4cf8b032de82d5aad442dd68e5048585e54f52f9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a2b70a74f41eb98c4a9e445a0581c0f6813f1ebdc8f4fcb96774a828ef0bfb6b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:32461573cb83dab0359ff1888bee525b0c826db84220f09294e4819024bd168a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:6234d6030bc0ce68e602afbd465857a0f230c3fc936999ddb07aabdf8c87b048 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:71076850ce22de6e0b6b02659ec7d5557dcbbb1ff9f5c2edb30acb00bb5ae8aa |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:ee3ef71969bd2e0892440b1e59894a1c70daaa7d2a4a8420a8c07c9c45896668 |