dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (fips)
1.32-debian-fips, 1.32-debian13-fips, 1.32-fips, 1.32.7-debian-fips, 1.32.7-debian13-fips, 1.32.7-fips
sha256:83dcca0fb5e5ca85cb27a6bf92a1a90ed954acbf645dd34392e5989790512d77
Manifest digest:sha256:6edcdae15ce776e285d57be6a6386301aff8c5a7a3b077e3e85155b79dbccef7
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:f2117cdd4a33cfe05bcf6fee44473de31888b9545871298315daca9ed05e73b8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:d678a4d70962401049711b0b62b58c9002d615ddbe1dcf1e772c533f7328c330 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:bfa3e0dfa19c24c05e324d5153f7d31f6c40548b6753ba6ee12fcd54cdf39ca0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5b79864ef12ce4f788c2148c7789e47de54ca20aa5ecef9dafd97c8a17503601 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b2982c289546bcb4dce50b6d87f15c35486e9363574765577ed519880b6ed7fe |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:153c1b9f4c237db21afe370796eb93b93fef4773bba789761001412b1d6a84e3 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:868463542f70c2571eff1933b15803e396c9386c2415479d117c59487ceada36 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c41497cd2234831ebd6bcac101474f1d821e479566356fb274ead9ab0ce73ee1 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7b651fddce8bb5f1ce51cea707984bf7f6d3ec0facea01f5c5c314c3ed064b26 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:2e2db8d38077899eed6921ea0efa28fac43fbb12852b062f3409a42b58c25400 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:d20d2d564f1329b180b6b48072a82210227444b5e0a6843c6591fbc8e32d60c2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a0a52e39ccc7215a951f4d5613a5ec391d4f46b91af038069f6ba98c25d30e62 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:891a3dd5acc04ae690368d60565ffe844f0737080d4fe3ddfa2dbde2635b3191 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:6184884ba93f9887c9d5425be065d7d51f653af9b34f02b8d1780c7892e23fd0 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:9c310e70eece4bf6158e9d0069a63e8960082396a1dccbccf22656d2156eb829 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a6b52a903b741afaa7d765257953d3800f3ef8fe4671f0634f2fdcf9f6b17803 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:3946dc7ff9992d50847a8ac49c0630a4f15265ff96730c0cf02215be2be2432d |