dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x
0.8-pg14, 0.8-pg14-debian, 0.8-pg14-debian13, 0.8.7-pg14, 0.8.7-pg14-debian, 0.8.7-pg14-debian13, pg14, pg14-debian, pg14-debian13
sha256:9585c3f448df1802c8a5f7eff2fe6753b14d4b42eddd371431ae0e510ae03ffd
Manifest digest:sha256:3dd241bd51e056915a3eb0c8aff583131c697c0cc4ff1b72cc864a4f7c8ff01d
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg142. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:b3d99b4593875a1b74a08082eca179773b3b62b0289e0be988738e440061a052 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:87734e9e42aaea55f959908f2ee22f1bdab6a2776a6914d83d615bf2804a5847 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:d07b65449c33a27b5dea8d48166b7c6ed2e0b1626eb3318d95c3e194070a61ce |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:ba77d3cf93606bf8960be0453298cc3d0830a2f04648d2ba11d2173e71c3d519 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:2121209b3d9925802bfaee503c6560f1d41b070e97c39d0caea653260e40dec3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:d827edbcbf66a91f475fa8cf13ed3593818aa0c972f734bea5f6efcbc8c75712 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:c926d065fbf7403ffaf70b34d792c5269170bc3e4642a810832dbda42182726e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:49b2f5a9f390c5214d976be045439ca0e62a95d2750b712dbf27157ee63ea9f1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:f964b7de0c84da706583ace308761986fe48412310a6bb489e576c4aca03c583 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:be3fbdd7a29d982ac7453f4a11c25d89da6689601f6783a0b6bf0cf22dd7d5e8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:d267c51e37afec38e8221ff9f270f151b88f6b9151aebba2660b58d22341da65 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:c4b712ec71edda22d9c09fa780c799e7e20af346026b930549c132f75d685cf3 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:d117cebedf7aba55d6143a1d5654e8401379d9f79bdb808582ed33d38d2eaa50 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:b98428c3bb396158748856668a5af9057903d5e011199d1eb50b7b97d98436f8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:10a8a4ba41d718417c2728ed8a0b95f5b5300b4f44cef1c874e89ed04102826e |