dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x
1.32, 1.32-debian, 1.32-debian13, 1.32.7, 1.32.7-debian, 1.32.7-debian13
sha256:c248f5fa0f63815f57b0d85958544adbb4d51e7dc376081ab7ce8f8bd54860fd
Manifest digest:sha256:efcd4966f824807126f46284dabf180f77df88129565a14fa23fbdfa7a75d0e5
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.322. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:ce12324b55ae9c49de674116300c2f57e106ba2c1f84ca07d348ea5d6413c8eb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:30f233a94ff7956713ee57860ceda19235c6c26f5c720f04fb6f275a3d8c37f5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7299100ead9510b03590c41b2caa212f07e466c6f46a024b3c6cbbd7c16513b7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:de3428fdfabcfe4693e5f27dc4b391e0725d8c11934ae9043d9f06d186198dad |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:e47fae134fb0af010fb1c3e6eac48a6c0d6549b07452098fc3b8f0e545500b4d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:3b1d37a0868fd1c06cbc85b7a0e7aff6fa905890e2bb1478eb68d4f6c4bfd74a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:aabf71b936758e1f7ed5b5ce8dd13255e838c70b5ac07bf1d38fa789730041ef |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ecce5892e69dd2df381701761c3cd4317dd93b2130645b904e20eefd4abda739 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f5ff84605d6ee204caa814bf2174103cc95437d809d4b1332e6a976a43e814a9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:21ceb8d3ac283fca82724bd7650505c8630e19eb6fbc134096f150c5f471da45 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:239108ed57309f2efad4e0258f23e1d8203f16d849ee1f9e37a08e8d3f665d47 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:ac52b819cb75a57a3c29da02ed652d9c8f3ee91a876490ce274ce30e2b3720d2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ee840b315085c6e5755ccfe8e005de55f6ef305bc3c4f4dd07f104aee0d2df8b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:8c0670cd38f219e7b6c7301989b7eb1afee4770674b75e22b11368f4b16d10ca |