dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:10d2d1e1c94fe4a42b714dc471429195556f588bfbdc5d67879c9cb85b8847d2
Manifest digest:sha256:99dacf71c2f2dc4cb55db553a08049ced958c08f9deaaf0e2b98e1b70de18a37
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:5d66e8fa87d71a0469bdcadd6ae1c673191735ffd1e5e567fe3a83f364b6f1f0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:c4193e485d0518f9e6f0f611a004e3588db8f9017540c253e635be7a90ff2b5c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:12bf58468fc9a89558bc23f53a74bf2aa4aec95962efbae7c34fd4f15062c565 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:00824a143314144c831a66ef37d9bd823c2b7896043ddace3a94e8587adebfea |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:f51ec6a7de47ab2cd5bb8a2cc4edbe816e5ad2699c7dadca9c92837cdac9b1ad |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:cb39dad43dc981b83e66d8dd39d9b6954b314e3adba48b7e18c01b8997e8a665 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:db4b153b4bc6700c7351b6b448add454c3951c84275c86eb4fa6564637bec34e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:c6de46d24baf714023c3ef9e29f95259d75057c3b7f83cdb01fc1604425f1323 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:736bee11f26a737704c815398ff9009468835133c9ed33b8a0993aaaf53346f0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:5a02dc7e05806e4427879a4030fd5a11714b88a8970c670c81d255cd72a8195c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:95d2e340c586ff088c68d78257e75e6ea355ea20fef3d36bf7c1aaa066a0e470 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:6af1d2dae0d18af5377c8af5e713b03c971fecd0df632611772443215fb2893f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:17e6e06c08943cf6e8ab40a95b0001fa2b3eab3002b5b9c2b5956714c8680f6c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:15b04dd4d2a87d57558bfe318b3047223072d47c926bd814d0f2a5e861237d53 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:bb0dc03bf686e961001ab26bf7f1675beaac7886256ad415be0a1a3025b3fe36 |