dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x
0.8-pg14, 0.8-pg14-debian, 0.8-pg14-debian13, 0.8.7-pg14, 0.8.7-pg14-debian, 0.8.7-pg14-debian13, pg14, pg14-debian, pg14-debian13
sha256:2af3b20130b0b2d923a420489ba5d20cf44775cc9eb083080cde36924c7c22ce
Manifest digest:sha256:8d838701f21cd0d8e7db7c371cc7d1070750f3cbe3ddae4ce459d4cc047a11bc
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg142. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:cb0524aa1eca2ec49819f2eee04fd0082aeb28e9c7f8775350eea8c428c980ff |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:259343e7b591e6672206f78e72ef7aeb467671aa6e85ed390614bed22d835624 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:3a72f78d0f287fc72e51ecd41df0d92744dc667b46afda4e88606f7c2b438117 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:4fc11192e658ba22df338ec6df59a8b6c096f9d684180bc08ffd97f8dbaf4734 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:ab7f4f8cdb269fa89c7b03be9a33af0a0aa564a592486d14963a11afdff044f2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:2d563eed36d40773307dae37f74b23a11b68f68aa1aa198840b70bbb0bbb045c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:ba1c1650232ec56232544918559cf6fe0b3350e2218d428d44e7f10907e12712 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:a6ff46bb642a9e96564ab202d6ffdff8d815ce573baa73f0083b19a5b191e1ab |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:5e64235b0b9f8a2b8c96146c3d5efbe043cf08d59fb39a2eae394762d55e4c0e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:a0a426af15a1ed5199b03e909fc918977e5e53e88bbffc7fb38df198ccf9243f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:6b5dc462921b9c340a87f72e0c0154ed13845f9cd6cefefb638bc216dd8e4683 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:e9754d262e73c725e148933736971dee14d78f6fa0a562dbda83df81252fe575 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:6da2aa674b2529c6103d03deb389e6fa7fea522d866fe7260d5df3f7bc0af6b9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:cc06071569924a93da2ff0b4f46f8d5e1bde1e3c508a44304f21834e5cd00096 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:df99d3ba2757ab4d713aa817b6e1fbca69fb7f6b142fb29441f137c48934807d |