dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (fips, dev)
1.32-debian-fips-dev, 1.32-debian13-fips-dev, 1.32-fips-dev, 1.32.7-debian-fips-dev, 1.32.7-debian13-fips-dev, 1.32.7-fips-dev
sha256:6d889ff9349290d83994e0174ebf5a9258265e78e43f36754b670b7e5f7bf777
Manifest digest:sha256:8193e7de05df2e627ddb23b5e63a723877f2dbbc14223bab30adcc419566fb81
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:6c60a6e4c27b9f13bb0ec0e4e47a3c74d33cc068ae6b9be7d29575612b3c79be |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:07ff749e4924902997c2a01b4db9ab04406d541fb2c6a57acd3630bae4552d57 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7aaa00c49e4f4c9b3d89d8411a25d732ca7984cf7631e8fb59d711fbea3888c7 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5fb0c0ba799880c420e1766b964ea9b33e79ca2b1209b4b0462a4ed86505b6e3 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:700b4721712531a65988c511269aa82198c1167d1994e745f68ee022fd425441 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:92e0db1fe5fbc162f4911f235495d32676419a012004ba3a34f53e912ee58753 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:ba277decab31f6d0a0f9094b906f8a0cf450616313dbc306b3851efa67558669 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1ca0209a66c4756b565650f3df2a8cadf4ddee87197b4fe4cd0a8262b7bc8227 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1c704fb290eef017d7896515d4fdddfb7c0b3d4e53da0afa41961ab4715ec04b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:add5300a9c91d057012f26ec46d6a968fb1d0ee62b85bc2e2645278dc2b1293f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f06df2ec3d16dad39c1bd55eed940595fdf84f759f975cbb03aaee32931f9d02 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ccadf796d6656fe8c4b92c28c933d5c3f7c950f7b711137f357e5dab2add8d8d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7b64ebc3f1c40d73c056b9b42b6e3606e10ffea577193a6d682e7503d751a7da |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:93ac4c0b19faac81104b09594eb73c67404cb57e313b23ce45ca7797d9d61359 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b2d2b58b0aac305b16d5ff5133a973a888aa639189650464d509b148eba19c72 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8cb064f45920b62d4af0e7688fa1c9ec32fc5a32e09bf2497e9d26947b82c56c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:bc8686503ed6dc5352144764d1ffcb496428c75a30cbd07a054e77d2a1db13fa |