dhi.io/cloud-controller-manager
Kubernetes Cloud Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.12-debian-dev, 1.34.12-debian13-dev, 1.34.12-dev
sha256:d7160505c8cfdb52d63d05d1096466197215d0ea01f9434c7cb2feeb8517d92f
Manifest digest:sha256:a29a114bd83be2208ebe545e29e57e2f63d35cd32ca364cc081415e79c8599b6
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/cloud-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloud-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloud-controller-manager@sha256:5295d0a0d00f49712b8d605cdcbc11cd2c2a40d17af132295245bc1c01db4ae5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloud-controller-manager@sha256:236044cacaa1d4913428fbd8deb047194d3ef0be3cde514137ffad4ea55339c6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloud-controller-manager@sha256:581dba10bfed29831debb1d3f60dba70d87b91425d5aef3a47bc5e9a3ae6dfa2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloud-controller-manager@sha256:09e1da8f29068c69e559be60842e23059567e33c68932ce150d2877a5af49a51 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloud-controller-manager@sha256:4712b21df442924551fbe5ea9581a9048a1d9b5ce3966ff241e27d7affcdf0aa |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloud-controller-manager@sha256:45075bfb219b54f7e823542a5fb093fadb551b7bee1a7652ba78a13801f7a4ba |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloud-controller-manager@sha256:35fcf52979a9a36627dc92f936a42e6c0622f497e790aee3c68f0ab9f7ed3dd8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloud-controller-manager@sha256:1b714d579f6904cff6557a48f6e8f2d23ab1b9908105d64ff1fd34af755193db |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloud-controller-manager@sha256:0bf0301e4435d687042e80d27a587cd41e268cd6e54e88b9a3c79653e8152432 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloud-controller-manager@sha256:9518d706a987a8805324dfa2265a5fd5d7e3d39c6aa7e335a621248bb8fd1fbb |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloud-controller-manager@sha256:68a0b87a0b3411fd271403cd0b25b49606c9facab08b74c4e76e605b066ffad8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloud-controller-manager@sha256:371489a2aea4e4b557f539b1651ab77416a15a89d72ddf19a1ca9ae7e36384b6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloud-controller-manager@sha256:cf7a2abf65940ed9e0de7c7f684b4b90e356f3cdd21cfdbb1eaa72de184c57a4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloud-controller-manager@sha256:edbdec0d0697d99a62e84385c8137873bc2da8101bc2682ac9484f235fb44e49 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloud-controller-manager@sha256:a649dc2ce75a03cc76a4500d6aa3df39c8284226e26ccdb87aab02d55cf5db32 |