dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.33.x (fips)
1.33-debian-fips, 1.33-debian13-fips, 1.33-fips, 1.33.6-debian-fips, 1.33.6-debian13-fips, 1.33.6-fips
sha256:624101884df935d4068aa9b1f9325596106f9dbb00b2737682a2205b7a4b357a
Manifest digest:sha256:ddec5bb275c7704653b7e7da3ba430dacae84427b07eb9e39120fc99964379f2
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.33-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:6fd01a2e517245696eb5b8f021d54758b7822c5f97fb45225f8aa9f2a5affe32 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:cbd46d296190fc215c951a009da1d5a7b74e0781bb0ea0010547415c48d215b6 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:719a7bb17e19fc60a923864f34e25197cbea366a3a79ad4066a0c0b0d9b9b154 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:cbaf264e4376ad1903ddabc1126e9ddf455b26cc9c8f1bb17f2e29f9863daaac |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:76b67a0404bc44dedaee437d1c75167524d9617f7e37197a6d6a0d34b3030bcd |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:ffe764b4b8a284db36ff99c4b22af4df4dfca6b06052aa0d0ddc8fb372c05a62 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:039d193aa9008f2c618bb3ef704f85739314f2b1b8c95972dafee7e2da4330d3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1f8a063014a1f25b208bb25c005994ef9435bec74e6da6d7bce5629c0ee9e8b3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:3fb879ef6b0ca00a069a8ce74af0bc9b730ebc981f5a27e3101c67f755bcadb8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:21c5e4d9fb40da42660ec87b544a81e6899d11302857039b63a4f4d475fc277a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:4cbc2ed793ef1aebff63fad8af229ded774f2148ae232e63e529b6ca86f4b604 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c12f6ade46005c91671d3c8a8eb99e9c32ab76e66083edb444db37a82b1d95b0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c8616c7020c393b92a93c39c6d7d5380b07f5538f3ab036e297a5b4b9be0ae61 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:0c521c2285b9b7534e43b84ca1fd998ec80a18fd7c916def83a500f877206629 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:89a86dc87f41258ca975d92ec68c00dec1183b0afe27e41614fc012a92f56942 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:032d4fcebce400db111e2717246a5c5e6cfda5d44f4b672764589461b3056bc1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:d1029fcbb979343a8a4f7d93bae1d5443edbdcc40dfd19a983ebeb03dd863594 |