dhi.io/cloud-controller-manager
Kubernetes Cloud Controller Manager 1.34.x (dev)
1.34-debian-dev, 1.34-debian13-dev, 1.34-dev, 1.34.12-debian-dev, 1.34.12-debian13-dev, 1.34.12-dev
sha256:1405a59d12a6162c3ac914cd87ccd5edd15a1d84a68bf6882c38566de627cd64
Manifest digest:sha256:c32d0c32a5601cdefefeba4732d2d0aea9cad2d09f0bd1691c842bb43bd67ba8
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/cloud-controller-manager:1.34-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloud-controller-manager:1.34-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloud-controller-manager@sha256:780e279de1cb3f23ac750362813c955831e356c5cb16f494e870e8581351db9f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloud-controller-manager@sha256:d649c994d5c08f23618907dad07245a848987b5c67db4109e2bfe884739c7c7b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloud-controller-manager@sha256:f478a4bd1e2d4a63d93a82af97e8c43cb14875d276b416c16eda098937e697c8 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloud-controller-manager@sha256:e2fe194ef0e547b6dd5e9388920ad67958e5cb8de68593baa5da3eafee1464a6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloud-controller-manager@sha256:9a0f953f857202ca293592d4c97b10059ec2c7da9b3b8e19a41b02367b401860 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloud-controller-manager@sha256:b3229ec5cbfb174dc6b8c3f7d11126d59a4344e2896badb3cffb0a64f309e4eb |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloud-controller-manager@sha256:f08d574305579df8bf8b6e0c53aa9b975624df510f64df1a127da63b23c8a0b8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloud-controller-manager@sha256:323778c91b05b79317efb618897e952b90dbbd70f28156c2b56214c63fc2876f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloud-controller-manager@sha256:2ad381b7b85ae51dd023708d70972ee7b9916e2b17da39e13703862c435878dd |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloud-controller-manager@sha256:045edc678b1838b6397d3aeed5655de5d47d1fef4a5a9511b9a4c9086539a541 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloud-controller-manager@sha256:7d869f2ee0045819f61f9b1c1113a8f46513711a4e4b51106b386a29b92a115e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloud-controller-manager@sha256:d17511dc0e043caf3b08af564d4dae9932b5b7e1a133114086b70d801a4bd0f8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloud-controller-manager@sha256:60fe6950de90a1c153d59247d4d97f25b2b9f21812beebae486f8175ff5dedea |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloud-controller-manager@sha256:91befab6390f689573ccf67af837d4f2665df2e3020f9eb2b71901bbefaef411 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloud-controller-manager@sha256:803fdd237470ae9699202227914bca8f04526187d8136593dd61b100abeeb704 |