dhi.io/postgres-exporter
0-debian-dev, 0-debian13-dev, 0-dev, 0.20-debian-dev, 0.20-debian13-dev, 0.20-dev, 0.20.1-debian-dev, 0.20.1-debian13-dev, 0.20.1-dev
sha256:46c0c3256372319c199514ad2c7a43e04f729a84b98f0f9e02cd25baf94a01a2
Manifest digest:sha256:eb9f8da475fdab01e131344347b5e4da9120f2d56822b1dcd6d171814166352e
Size
32.74 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-exporter:0-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-exporter:0-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-exporter@sha256:988cb4cc057d0ca235e4cecc8422c15769986cea29af002a384f9f8924274d27 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-exporter@sha256:0b18b697243abfe0440c66900d67e01582b16028d4f82f18096d3cc3c0a9bc6e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-exporter@sha256:a54819f8a882df3ec93899d444cd39273b3e360cc69d34d13adba0138be05182 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-exporter@sha256:5213e37380a87f984cf857f15dec0f1e15a0614c653dfc9cccc3aa0b0b760b47 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-exporter@sha256:1aacf57853fa2ccbf31006bafc2ff37c5e88f018ccb01f946fabe62e5a3082db |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-exporter@sha256:318fc561e0f88dedd0b9303dfc6d20f9d19de1a9135b4d5f0c2cbbb9e1875fe5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-exporter@sha256:2d7580e040d0a66688997b3faf8c85dd00791c6db5016809cb11ddacc6790bb6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-exporter@sha256:a1c12adce727b78f3306169e2489627394061060e512dce68b087a28a41e1131 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-exporter@sha256:6f0be33c6c36ce67e8d9484839f41640bce8b2b4ab89729d78c0c5238f9e3f01 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-exporter@sha256:509cae4578dfc2ae9c68a17b66bea0c8d8e7617bba135f494b4eb6fe9068f4e7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-exporter@sha256:edbac87116436dd8997ce2a45f1651694a8652738572e2abfe8a9738ed2d6cb9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-exporter@sha256:310b8426a1eb0203474747ba86c7a5378e2da441f0f57eb2a74edfd2825c4e2b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-exporter@sha256:297c3f247ed9bdd7276c1d79c1556e968ea4f0e98b4353772ce48a70c875f575 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-exporter@sha256:d3e99243189088ff3b822ed4f433b741c169ba5a0c9c83fa80c3d85c140fc6bc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-exporter@sha256:15e79dec281c99eecb4dd3f6cb08975ad8c274d7480ca49190265bf3e4acff35 |