Sign inSign up
Kubernetes Scheduler (kube-scheduler)

dhi.io/kube-scheduler

Kubernetes Scheduler 1.36.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.36-alpine-fips-dev, 1.36-alpine3.24-fips-dev, 1.36.4-alpine-fips-dev, 1.36.4-alpine3.24-fips-dev

Index digest:

sha256:b2bd575a6935011c0a5d8c8541e5e85b6144f84e6ef3e7bd2672ee3b5b5d64a5

Manifest digest:

sha256:44b2d27f077e1fec7504dfda7f2396d326a050df24febdb7ab2bf0b900695a4e

Size

42.09 MB

Last pushed

12 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active until Jun 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kube-scheduler:1-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kube-scheduler:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kube-scheduler@sha256:2fdf89ae15252df39966930ae07aa92eb1777c95ebc4f6daea507bc0e2fd6752
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kube-scheduler@sha256:fde2ad756613fd234bf3169232ecba4b94c4eb7be17a1fa29032ccc61cdb010e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kube-scheduler@sha256:78e02b22d2c8c5e324461f6dbdafee973d2fc49fe11137a37a3137d7a9376c9e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kube-scheduler@sha256:d57ccad99178697a2c31d37c3394d7328319f40a2edfd4f76a00981dc2aa4682
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kube-scheduler@sha256:b2ba734af4af84e48cd909f01223dfa7474a212fc99cdc5344823cece0e7b01c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kube-scheduler@sha256:c06a9f4c1b2972d54c47a17c7e7bccaf3120ea20333ef3616d6980c9f9356d69
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kube-scheduler@sha256:22cd8db653e9e45820ef1ca2a996bfecc4207513545c52a55031cdba71da1bb1
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kube-scheduler@sha256:0bfaa6944e642b8abed30dda72afdca72d4c832e9d9bb4bd82c96429cf07e931
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kube-scheduler@sha256:da2e89c1cf4d6ced1ef21c3eacbebb0cd3c9af35ec79111ed77cafd0f5cfa47e
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kube-scheduler@sha256:32ec36b9db8f0f7b6533a68ac23f9e2e93da2926f54431773ea209aba37a20d0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kube-scheduler@sha256:2f4c1e792ee1d71e53de9f89234855cd55dd34dbdc0afa2a54047352eaca35a6
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kube-scheduler@sha256:bec24de12507bab81d5fdb480194b2195f8e9ee416b33ed2540b197ef03a6031
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kube-scheduler@sha256:c66876d91068fad1187a5ca1b7e22f0bc8c9f670f5dc13a66e7e65cbb8657872
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kube-scheduler@sha256:d55f9b9550babef4fdcae93f363890bdbd0a19da79942a3bfa89b8df48d6b559
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kube-scheduler@sha256:150a85ddc78fc1aac4acf2f6e25699c31a4cd5263c410d4aff0444de956dcbe5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kube-scheduler@sha256:3f8efc5154c7fb2f8da64b94e9e5d1ac5809a33d4c83ce0db26ef96669ca932b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kube-scheduler@sha256:dc99039834280d6a25df129382b6a7f8797cf69e5908a5a882303ef41db838c4