dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (fips, dev)
1.32-debian-fips-dev, 1.32-debian13-fips-dev, 1.32-fips-dev, 1.32.7-debian-fips-dev, 1.32.7-debian13-fips-dev, 1.32.7-fips-dev
sha256:812350c59f3e04d256021f562ab51cd2560c78ee0136411d4fc4948d5672ed8e
Manifest digest:sha256:2dfd05ff32c59c32f257ae2478ab39e6d09c0dadd776eabccb40b8bfd7b90d77
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:67846afa65b0a38d2d781736d72fcacb5d0cabd1630ddb376dd35861f4f3ab1c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f51d4e5a4031b41259f624f315ede9ebfe868f7558c7a7c0c2fd2a1079dff580 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:501340909d0fa8249f2f7a42f522640331b70e894cb2d76244630082a10004b6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7d2a40a6a4d84b1c6047ae44f4168c029ce174f4334d7af0cdf145409174f18d |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1130c176ffad916e834387f2579c7673324245666f1dab5a62d72f84a40121b6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:8be26eb12423c3b434d56078e411f12ee9d94cea1ab7ed2263ee18c611a4c83e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:3ab4a7e4404e01f0af3d270e191e84dd8dc9f61ebbb45e4d1855bd8243fcb710 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b40312d4af55d03906af43b169f5bb034810a32d78c1f3e4427d5cee8ddc5111 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b1f26c0b22b8fa541c0cbc981b0c5042fa7613d3681a511d3bc6fb6209f431f3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f1654556f679b0480a85d7f8b6e2e05bc2b287dda0c25e651d2aa5996fcaa235 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:3485534971cee048ad57eed89324786c1ed56f06b9421b8e165394c73fe0e390 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:97fc5e3b3525821dfa6688507fc1364eda6193bd59ea82c2bf45b6b48472144e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ce7cb9260553ea52e2c30968c29c91c9fb5fd93687ff25779d744f498b5b2963 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:9a90948f379afbc96e718cb3f3b03acdd175f73f223a07b99a615188374e2543 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5b435cc50d3297e436994e8728b80bf0cc04e4bb746dfc9ba7feda32ca89f53e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:52463c515cfe9b9ca8758a1a44e66a2c0e65edace1da7d86b6ef94ec92899dfc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:fe3132f98460c847424ff89c974aa2894374548b623a1eb8f21b8fa76e72f582 |