dhi.io/cloudnative-pg-plugin-barman-cloud
0-debian-dev, 0-debian13-dev, 0-dev, 0.16-debian-dev, 0.16-debian13-dev, 0.16-dev, 0.16.0-debian-dev, 0.16.0-debian13-dev, 0.16.0-dev
sha256:746d77047dc04e086a3acb3c706976a426dae2bda8640dc4187e6d7a2fdaa15f
Manifest digest:sha256:3a17fce6fc1823543ff2867cf62e0445d99ffee837ab8a18e4558115f0a155cf
Size
54.86 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cloudnative-pg-plugin-barman-cloud:0-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloudnative-pg-plugin-barman-cloud:0-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:b0b24fb651f80267a813d6f129f65db76981874ee646c5ddeebcd5413dc17a03 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:ae0fbe8af04968a2c9d41c7b76164f802d09303de8b02ec4cc4c1647e5cae2c1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:7a9050c04028321143615c94696b08ad54ab240aa2868727a80b3fa3762fe656 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:9ec1886096c74381ce5242aa02baf28c721794a43f5389275dfeda73cd678552 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:22befd1fbc84ef19142bb80022630dbbd1031201bc1d7c79a56a51fde4f8bf25 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:6e1fd282f19a4b653c636569946e6b68c9362bcb4b0add5a69727732747b8e33 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:25aefb15b6a1555ee4c8b8a1dae7c96a5accb0fe23bbd6dc86695531aa22f405 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:1e79e506427ad54363354851c3f55414adbbce1fcd3f7eb4b44c8897ef8c76f7 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:c731e4d3e00f636916a6958b420ff7fe315287231bfc3c7990496289bf077ada |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:e1876bcc1d3fd31d3220c600502e54370c8683abf0983bbb160ee473f5a6e1bf |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:f20b3ed8be92e6275a8fb9d4a18a1913f75e71afaf711cfeb27fe71718a1b6ff |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:21389c68684b07d2b45f9344baa78f30ca11ca81c87bfeca9501205e3ef3a931 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:082a46df8ec53113af2c36395ffb1e02fce840290a31ed3c2112b295fca7d32c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:7e332a22da857c1e7e927114f5f6295a0f43ea560421ef722de13418991394f2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:4ed41c3f2c3d6784ce90742a449edeef06e0eeb039043014861fd9d5d5cc26d8 |