dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:fec95d3134e4f66299ef045cfbc7864349a0edf3f7cf09929d223b827d906ac9
Manifest digest:sha256:e030b4104ae18ec7a3be2f1fb5a416821c09566d9bce328a1bad60ae7114672c
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:97a63296196ebc208082329762662f06da7d57f2124c28a8d5b5c6b00ade91c6 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:cf26b8a7e8dce51beaa86cadc3e2906b7d1e9c2875808ef42beaa881cbb8b12a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:0a872890c137248536fc9a97342fff99ad4bb27b71a32cee01e85c104fe7855e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:97a52bdaec2e6102160764da5a6e490c88470f76fa60a0f4ffe8977b5523c3a3 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:095ab0536abbef86b46fa9439fd0cc3b78cc2f4e1304fa573738d4d66fa532f3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:c624ead3e915a8ab72f4d0498d318d211c8ebdde47f7a2abdab8e5e13b3adb36 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:bcb568dc7c5ec1d1b0924380d3c0d31349d139000c4732e461f63bc90959f3aa |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:b57009c3dddbbabb4116b000faa3a1920a7852e763a6985297935c95de761bb5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:2b5c36b3e1fce1f6577a25951fecd1f84e18a8052d332c39f89cdf414f283241 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:7f479e707d6ce26595afa2cb2259b7923664c171b4b15c298a9cd3f68539574b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:e76e9eef47489502a8b4d789344c50ef8965c0a8a859259dd9bd24443baaf398 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:42679a226feb1d2b0222c52d1c1a626cfc063871065ccb29a7478ebb91e749d9 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:4c68697478f0e325c3b2b8f9d1864a972649aa4f06705c1b9a895e220883f010 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:e6980343e7a4acb82279dd7899294c4984659f24ccafd7c701a1a3bad04d4baf |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:92af1a5464f839507b37c3240dcf6ff9cd6127ad5126886e8a049d3ddc113bd7 |