dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x
1.32, 1.32-debian, 1.32-debian13, 1.32.7, 1.32.7-debian, 1.32.7-debian13
sha256:a600440c39cfe6206c6c6caced3028de4c9a12590a1104561b4d184129eb200f
Manifest digest:sha256:55e70a9421b5ed4ffa3cabacae8e67d8bdd3cbde30bb754dde89128a4bda4e31
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.322. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:99ac94f0379c13712ed9c7cc8a9118c63037a6cf16a031abe2f91809fa5e0f9d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7be9e275458b323caba020703464b311f031b3568f80bb38ad67c11d85d619d0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:6ff60ff6502d5a898b6b8c5ea6b65a9e2bbef4d1a769efa6bfa0f3fc0d8d3087 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:cf41097ddf67a89bb2a4f04fae10e5513812c6ba5aaa37cd28f2ff9544ec326f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:d24b9e66b4234e4bc2141edcc8d5ee0c5f1fbe629e9ee4928e6492f912e4a01f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:40cceb9b40d243643598ffbd91c2338e072605c16e49671b03c8956f3dfe222b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f7766998389e9cd5228fff02e7f9154ccc900858e85476fd8963e7781b1a89bb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e4527634741aedc05a9f1e3e38fa0835ffef51583ee9e607858b820478105b59 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:4a4600a6442b9c26d3c2763c1a5638f64b483e34a83b32f854d3ac91df6cd8bd |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:48d08a8482aae87563fd53b535a0611cf7168ab39af5246df0b6e3dfc645bc91 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a5a7e2cb3500be1559ef030e9a919c90b8ba479caa955cabd0789e70495c2862 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:a42664afb4c10f1e276ce78e0cda11a17868f26af4b4ae9aa54cb07172b3b70c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:83fad3ae39324144b07353a30a48c7d770c1a167f287b0fb68799ce33d33b894 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:59203c395a385cd5d85f37c7cf59ffa3790907a913701e0009e6aad34719c1d7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:f5ef232a77a2a85185f2c5cfff1790446c2a8ca1b2267c239e2401f22e1ebc92 |