dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.34.x
1.34, 1.34-debian, 1.34-debian13, 1.34.5, 1.34.5-debian, 1.34.5-debian13
sha256:92daababbcb350183025dd7b906d2f529ddca17a53dbba7a3dab56c71718e098
Manifest digest:sha256:64e862da6d95a287491837fb84a227d3f737dfad7810feb8b42fb16e23a83160
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.342. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.34 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:32a7dbcc909c5f16e61823236d3b01f19794c99193ecadce15d1b31c54c2cc69 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:dea2933b3cae38852e7a3d510670d4499edb54495c0b1ad026e69d0c68cf6294 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1ff18468d2e48dd2c987de326dd37bb9cb5082d39adfc578eb151aeb46b74d63 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:bbe97ae2107fd24a6d17cb0e088d7b2fd7fb96729188779b8618af3da49f5113 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:ff7bee5bdde554d71ca43fede0593df16519264766fe4ad343d08d1a7ba323f1 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ca9241e0afb905391467f81ad4af0970084f99753e90f848c8a00fbd8dff8e93 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:0fea137207848feb97f2284bb553ecad213912499b040bca98724961b1a1b554 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:0296df0a0d10c775b9dad130750f9afb47f4b4637197cf6f39e71917009516c4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e65915a434c81acdd70a0549e1f3da19b23af85a92755523e3868effee30d098 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:68e61c4656e9998891de35efaf4806adcc502e768fbfbb77b0d0786b7b6cfb8f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ef7362e60843ca5b7b28795e214bb8480c1de499966b5b53e39bc9125b240e9c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:92656c2c4ede5cfe065db1e551c581250ee4d14d140123f5431a7d49369e476d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:66926a95942fcfd58a679ec79ab639e77cfaff77ec54cfd20188f5241d8a1bde |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:643c40cfa0150fab516361659b2ae6845db8bfb0140cf20665ada95e84ba35bd |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:159d991e005431f2cdfe99fb9a1c8ebced7177625cb0495c99aff95e6b92112b |