dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.34.x (fips, dev)
1.34-debian-fips-dev, 1.34-debian13-fips-dev, 1.34-fips-dev, 1.34.5-debian-fips-dev, 1.34.5-debian13-fips-dev, 1.34.5-fips-dev
sha256:df40649cacdf70c9a6e8574c209be2263243dbb5a6124d04710c93825025d09d
Manifest digest:sha256:c651ae57455584382cbfd907f256c0ce5ac19fb0c009041abbcfcdb45293ca5b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.34-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.34-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:53567aa77e83217a05ff94d521b1efd2fd91996f94a312c3da9cb216130367e8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:a653711ac14f224a179ac3ad48cb52861a6867f9022efd3204e1c65f8cb7dc72 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:4634840322283ccbfe1cfc0e3b9c50e363f616c6bfee1f1951a23451b854350b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:692134917b6f50d934ad9a6051a9a75f8f8619173d0a675c3714c73096f3145a |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:f0e123801be6b71f30d602353b7c45fdc0522650eaffc8c656ce347f25cceacb |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:6fe671287ccf3f9a9097a40fc7b2a2a503d95e4694f06a70dc5cda82ffef72d6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:1be3eb3f4eee5007f62aae11d9783f9a8e6b65de347495d3e677cfc3f8fc16cf |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8d0d0b7ac9c31e082190d0670e67626051fa26377bb81425f9211fcb7f2a6343 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:343347429594dbc8b880beee39a5cc4f94fd5be9d8cff1d0b9f0b8bdb3da0096 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c8a572fda6313d10d20069cc90561168c4bbc59cae148fe0673d565a1bbdb0cd |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:2646f255518c8b7355ab47cbfe09165efbbaca970ee1ff1772b17bea2c51f3e9 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:5995ad843b7a4211c468b9eb16c5434c74416f46ce069a6d5ab148736f72a2ee |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e8ec76a92601da70d967cd4f2956518ae12d87e4c16332a0231e9fba54c922f0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:e43894771c643ed1a05ad4a7506e7ff91467c2f424e4317a3fbc9da74ccb2d11 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:9cb1d45cab34859d0d0e4dcdf9412ccdec986268553841133a642c858131a301 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:41a3e5daa1987eba1819180ffcea86cd3efeaff8e125c23f4774585d0cb8a10c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:6507912465703d6b0fca46085ecfa481aa492cd49b8cab71793ad3767ab459ba |