dhi.io/kubernetes-cluster-autoscaler
Kubernetes Cluster Autoscaler 1.32.x (fips, dev)
1.32-debian-fips-dev, 1.32-debian13-fips-dev, 1.32-fips-dev, 1.32.7-debian-fips-dev, 1.32.7-debian13-fips-dev, 1.32.7-fips-dev
sha256:9ce096248e3595eba6e127a1fac291dd5bb8194235349694d5d04566d62fdcbd
Manifest digest:sha256:59c7ceae4ce7da0050b687484c8e296b58c30264ca21a2146d13a4bf68b707e3
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-cluster-autoscaler:1.32-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-cluster-autoscaler@sha256:61e55d0f6697e57546d97d0ab32dc10d432dee2a89bbe3fdd0d107193b5d4daa |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1328eb8bac7f7d9060ab9ccbc09cf00e24a921f8537137d78a3d6f5230ba9cc1 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:498b1a1443812a4092bdf62bf265dfde6d0ae8332297b4e1617f0092d4a94b37 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:ba88e45bd0db887c41efb9a3006921928470858f9a271519c1608716e8d46b60 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:1bab53c2f8287859ee7f3623bcdb44b31370fbe2d6d6453a058ccb72c8ee5e6d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:ee143aa3e4b208018dc4e3030a5ce37e0b08bece80d969b5abfa73e16610a39c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-cluster-autoscaler@sha256:cd7dd943510c3678d542ec7aef8e9a597074c87b1356656484fd328e738513d0 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:fbecbec74f45ef906036ee3993f7ab819ca5025ec69f4349c2aa6de31b8cbc2d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:98fbfeb8e39a6e278cf25212114fd2dab9efed6cccc4de924d33aab9d983d6ab |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:699b45a32ac125903fc86c63fb4d216119cfe8283503701eaae5a1d0e15aefca |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:cc3ea1453f3239dc09f978d6b467f3b51ce0613478af4f4c8919b646b0a1fea2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:bb4474f6c292cae3084e43b8b3b05234f60abbb82696a37cf17911757a7cd6ad |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-cluster-autoscaler@sha256:bfd2378885ac7aabae2bc7da73378a80046d9992284ec260d97e1f7161810f85 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-cluster-autoscaler@sha256:813c5dc1784862097f4713b770006b66ace525b16b032fd78ca3ed9934344fde |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:098f2d7212788bd10b3f7a01e3a3c874837708ced79587286f18f1fc12df9e26 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-cluster-autoscaler@sha256:e1feecfcc78bdf2c5e4c3465eccd5ff75cab337bee38e397ec81c524ce0f8fc9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-cluster-autoscaler@sha256:5830053db6cfc0d8292a1403d4e450d5c6d1ef01cf5f3569a808abbf107035a4 |