dhi.io/cloudnative-pg-plugin-barman-cloud
0-debian-dev, 0-debian13-dev, 0-dev, 0.16-debian-dev, 0.16-debian13-dev, 0.16-dev, 0.16.0-debian-dev, 0.16.0-debian13-dev, 0.16.0-dev
sha256:3f0c7aee49ad5ae1eb5ca271d44268b6dcd0c2d1bd899edbccedfb9a4c99f231
Manifest digest:sha256:72bc279dc736d0bf94be0a415eeeb2a749ed6ced05322aaa61d13bb10c415645
Size
54.86 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cloudnative-pg-plugin-barman-cloud:0-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cloudnative-pg-plugin-barman-cloud:0-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:55c0f5e8e7489ef72e930ffe4f343a2acc1bc47376b729e69ec67e26bac2e1ee |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:03fa56ef6fc9c71028601309a56d930f60aa762f7ee113bdbe81c4d1e91378e5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:c7f681c0fb039cf27fbb80d32e3c69906a799284d88ae322026838b22a8675cc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:1b1d31910211f3fbc8cabac427e0bf8630ce3b647ebdda74d792710bbde1a07d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:a607dd3d2e55e9b214781271220d86e36f149b3de208b45a16856dc4f3ee513a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:8555c181d22885c1936fb12b2a4fd0352ef787d282ed9e2f45bcdced59b5948b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:4944ca22e53db58545821ffc16e125e5f130b6263d7e3014eb93e7f434702b08 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:e80898c1bb462ea70b3108e4271e00d7552f4c8df5f9af5d884c16a8f34e041a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:c6e67bfc442f9eab884bb31a335ab9e8caec65eea2014f67e0d6eb98ea6c6954 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:628cdc8eaffad6d5a19bafc1c924213c3c6b49d03f81f587c8e2deeb72398293 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:7c09762b9e45b5e9f9924605ed5a4adee4fb3abc7fd0826f13b320713fce3ada |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:603b626354ac8717e15ced4968e31a01342c6f1798505767e9957564b002296c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:492e427b33c28e0593aa788193dd202dc4c6792ba9bd4fffff058d46232f19f8 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:ae56b546e9b52f78856dd364be9a2f001ac2aaa5ef2a5d91d6655e9992952eda |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cloudnative-pg-plugin-barman-cloud@sha256:03f4040e5471bf819bf1b6cf7935131a7a7b000a565304f9014318a9ecdf7f18 |