dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.33.x (fips, dev)
1.33-debian-fips-dev, 1.33-debian13-fips-dev, 1.33-fips-dev, 1.33.6-debian-fips-dev, 1.33.6-debian13-fips-dev, 1.33.6-fips-dev
sha256:ff5b3250c75c469814b1923c8ab4175ac4b8ec372e4ebbadc67fb9269c40fa7d
Manifest digest:sha256:4cec50ba0c2974163e975b52f0dae2c6fd42d5f732da953486f59f4e6a5a6f2a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:5367e35d1935f2ed23023cb5661b66bdff7107c6aa2905c31ce5934cdd27b1f1 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b458cd1773c6ba67dc12e846383a0def1c3bdf0258ebae6acb24d611727d08e8 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:b5f3e7d277a95cfa1188df2146a9070d0bd42a3059883b9fd203fa4f955790e7 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:527845683ede918a11bf9def8de93237ca8671277b9b8e84f05a225e99a55cd8 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:bf67ae0603539139e5c9862fb755fc5e06ddbcbbdd81a38c11d9e5363d754ed1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:c85e8afcaea7a98a241c3f19ab249c5846cef0af163a0d3f5cbb7aba06c6b837 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:3c008fb2900e026fb7bc00c538e4e42ae9979c7a0e8fe35ab9bad97a3d2d3c7a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:52f0125d183b2c2fca8f98c741b7871a21fd1cac9e3429ec3ebd067b02c71550 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:38203134147dc8fac9a4554cb4c58cd2cb0f7c57c561977af0234bd1fe1aeb9c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:42f7f174cc2bb25d39fa557cea53e3a24e951bc8dada8115a01cb5a9a103fb76 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5d2523dd9e5b0711b7cbbc055e0af98a36fac11470ea78fcaf4ec2749998f2b6 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8e582e6ac1e2d7c6be2645c763ce2b14a804bc1fc10ddab3c1dd2445aca7d4f9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:feb92b7a21b20e158449299b67303b87654e003fa4b6a77f44bf75f0e9e0eedd |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:4b2755efd633e6efce3d9536b775d9d231205302cb637d77d594119fa17301b1 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:4ba7961196661d0a773c79d0b0d8fd30087c0401f31699f64ef897168fe9252c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:2002a9f934fa8adad0a65576ca86d619b0971d415298c0d2a0752a4a4b8f53f7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:4d5dbb443c4c5161a92f2e51f5d818b2b08ddbef40a553bd3f8d2d035d20e246 |