dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.34.x (fips)
1.34-debian-fips, 1.34-debian13-fips, 1.34-fips, 1.34.5-debian-fips, 1.34.5-debian13-fips, 1.34.5-fips
sha256:69257a3a1c454b2ebbd174bf8e0f58cbe72478fb040e8eb4a26d2cbaa55cfa12
Manifest digest:sha256:7542ca6c62adf41ea44ce8390ee380d8b1e863acbb3062de74ebe6160a757a2f
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.34-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.34-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:7264236caf784d26eb6dc521f0f229b7aba43bb02f6c89340cdbdd0367ad8bfa |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:6170d1efdd47a3489027f91ab8709d2e37388a70a78d04b572160e0a31406b64 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1f0e8d4aaea89343ebacb74ccbdc62b65daa52ad85192e526dc440381c1e0738 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:66baa98e9fe23210acced1f4dbfb764886bd70ec978dab85c1f0b6c05a13761b |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:151c344f8ac304a8780d8b4e9eb028d88ff3a637bc6d9acbf5ff99e6c5b38e53 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:5b926b7e1266de6947aff17dcd3cfc21e952210002f4c54cacbf122b4d2be2da |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:6b1562c4dc4f298fc1db57f20a4712ede1815602830af580757ac629113b88f0 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ab5e6412d223da64da380e1d31b351be8ab8dc259663cee30b05bccac1dd12b9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:104fa4c9a007a1ae367d298513e403f291033a6007cef7c30d83b9f354200d0e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:6bab0a83740350621cdd69cdf7f3dfe2a1a229a9e0af4be85f23edfcd52c8b65 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:fc72eceae11277cb4e55f14ab1c2fdf2ef46fa02cafcce94f96ae6d7d065c36b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:7cc1cc919923ec342edad9b09d3ae236dad7b50abadb834ed0e18fe09ba6e4b6 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:43c335c295b656eb7dc1c3638a0ab8f7710e0ac567e511560b504176f571e4bf |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:81b6612e204c49dc147746df7979283f861c1485a478d8b94777630e510cce66 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:8810ed42167ca293a76b96f1b15f5d678a732b1f6657436aeba2e10d7bff518b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:c69f74dccf265411d6be36b7dae99e6c25d150e192db4a039d563e6d35ee7301 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:c65b9b526cf2d5a174cc01a49386b348ac54aeda662170f730187109b35285c4 |