dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x
0.8-pg14, 0.8-pg14-debian, 0.8-pg14-debian13, 0.8.7-pg14, 0.8.7-pg14-debian, 0.8.7-pg14-debian13, pg14, pg14-debian, pg14-debian13
sha256:5029e888a3d6b99f215ea3f9cdd54a4e6380af7db73686039fc37ba74ac1f359
Manifest digest:sha256:59a5908cc8fef5998dd0db6a39127a5da34d8f7ffdfbd926ddde5af08ef1160b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg142. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:04b6a7deb009304860739a34d1610d4941db1bc4deb8e934a35144f35d4a21cb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:8462f0ee24eeb1ed6411f7aaa95970d74d09eaa02200bdff5f2928ad684f8201 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:d85a9b873a504648fe1e19d0076c4525f1fb4ce69d0f0220617244855d288b2f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:dea40e0d630b70cd9069f820006bdf378dc2fd2a2e3b030543e1f63b101623a1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:cfd3fa9ef2f35a245d03488b597c9963678fc67b49af3ba158521d730022c2bc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:78e7ca78ae797d635490e325284aecf58664a2d01310b09cd3c521e6617cf7ac |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:7f9679a5749285f56a2e67d64c62adc3406891965759f150ebe286164ce44068 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:bdcc9f9c9892bb76a4ca0dc0531e43f6e129dad35aa4df9b9de4e29ff4834bcb |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:fb08bc3f3dc630d95092fc9fd59040c01695075f83367b9a4eec78cd38fa037e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:0b0f550ab45554ff28f2aea7010beeffeaa3175f5218fb4f6c7bd78b5fb8815d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:1c7c64084efdcc911522fb8493a06246da2beaa2279d850f295d1bbfe4524296 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:5be79eae3b386fdab3cb62086ad49cb2a5cd983c6add6cbdbac0e03fe1f47070 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:9dc1004ab9221bcc8dd594ddfa26628be30a5f4619a5c5f40a982eac313edb29 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:647c17a33be0ab20a456f1f02618ffee5cce08d48e71975db59aabfa1248932f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:98099b1d5ccc1950bf8f14e6d65ca9ea1b7e66e8cae8f657d5831028e8206614 |