dhi.io/postgres
PostgreSQL 14.x (dev)
14-debian-dev, 14-debian13-dev, 14-dev, 14.24-debian-dev, 14.24-debian13-dev, 14.24-dev
sha256:b894ceaa0b91bba61b88c6f6cbda6cf5a52aa99a535ebd3b048d1ba9648d829a
Manifest digest:sha256:11384c066bb966e1be29cb9c4f27f58bae7fbd6874426780c66f15bef1fe3f4d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:0654d0b5ebe7779c7a57716574b365efce4dd74eb72a12fdab425cc02d9000be |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:bac897968b0d1a1e17a745b181b2e0739117847dc9d5a37a47e891efcc53d76b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:084685cdee2e0fad56362ab091eb0f631910d5264d6d38224c32cf8e91737d3f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:fe1d143bebcdd07045b52ac8a7211013f74cd6d0debcfcf21f72c16ab46a1cb9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:9b829dc2418d190309318f8ebdc606bcbaac9ab9eecb515f472890f1a8268a38 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:e2f758af8d99e65b48568207f459b51eec54bd55834b94ac9db5ef9daaa632f2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:89f796c0e944b01ab0b18eff99ae152216dfe4a0254ee433ca75b9e0f74851ab |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:477ceceb06bca76b75038d88ed95597076e46d9ad587c07c213bd9b48f4b80bb |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:e8b17a01cc54afe5d333d810e5f79b35ed207200a16bc4a5c9972219d695e5e0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:55452129699390526a6112737bb3ca5ad083871d840789038173ceca7e0aea3d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:2f14d6a642894d4d3f04224f48d839e1fc0c098c742068f433a0b18d810e73a5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:baa0ecbfb0d7b1f104483fd01c88acb8024d466892967fd2e0e635ebece72d49 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:d4e6d2090671f029e8fcd1a7ac197998d48050b8eeca9e6f1802bbeff7d9aadf |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:4ffb18f29213a243f4aefc556a8b71752dc04faaaaa26e574c6830e5dd0da962 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:ff42ed01b98812c6b5802591427c93069d66a48d0eae6bae31daa1a172b0c5c4 |