dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (fips, dev)
1.32-debian-fips-dev, 1.32-debian13-fips-dev, 1.32-fips-dev, 1.32.7-debian-fips-dev, 1.32.7-debian13-fips-dev, 1.32.7-fips-dev
sha256:23af8d33478c0ef0e2770429e9f29d40d16e3573f637eb9a9396ea6d657800b9
Manifest digest:sha256:1759996cf94e3bcf45d5af55076a8154877e2a62f42f144ccfd4b1b9b1a7f564
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:1713c80b2d5c42806e58252e441a8a1095eda1c1de26069e5ee77a7a30eb9e42 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:0f1fcbcc742b8edd9bf08a02a7d6e3bf6cc10d70fa8b9a9c0b091fede6a0980a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:87cfe58ee6fe1916e004c429461518829bf66bc383220f84396df897b7afdd7a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:030e9015176023524e0915d29289c4fda65a2202e2d699f4b7f712710f4e935c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8b5ff0fb7997d2c35ac0ec4e6d22c36ae42f76d143f45ac32f6e94a563ce7f64 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:10e6f95638ba5766d57aa7a225526c7ec647da69f8df66e9002d206a2054ac52 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:e5a5d8dbd7e5815e7b22a00ebe765e948af3ebb910eb2723622ff9a83e241405 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:31a0bcf27ca66f80f7642751219abee593e0e1758b6d1c39e8ec93c2fe3b5100 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:916d2811c2ae6480691e6b350e22fa578c5e65ab2371574463247fed3f958575 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f850ad071ddbc9d80e31635e9a9b6530858e2e8d065930458399168bf6959187 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c3eb87182f5e2ab2c727bd67d1eac9aba436d63f7eb2b00959bd6aad1b40eb11 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:67180ec3ee16f4548d091e1c018f84f86cdca82bca3407820d46a0587df2b69f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:4d87cc4ec7ee863b07027b00d11aff266fd9620e40ae5be7d67d2408ac418a4a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:392677ee9d35d6165d1708b6cd042203d3103b2608cb64ef0da80b76ec7bdfe7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:d1908827ce4e954dadda0495a61e264988f953a2793b5d5936d9cb8e5d17d53a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:791002be887fa62477dd638c8db0c1b5c38936d42f97fecc33055779553f2912 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:5f8d0de6924b0e49172fe3c3f763633038e7aba90b9f8e8cffa45b8e698fc285 |