dhi.io/postgres-exporter
0-debian-fips, 0-debian13-fips, 0-fips, 0.20-debian-fips, 0.20-debian13-fips, 0.20-fips, 0.20.1-debian-fips, 0.20.1-debian13-fips, 0.20.1-fips
sha256:67b36f6a9f9bf53c61c190e419f8990b3010b79596959b1ff73b07b4e9b102a8
Manifest digest:sha256:663457a5bb6c4a155c6764b88558c6ead342fe79abf5d10b4e312a49a99c60bf
Size
13.72 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-exporter:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-exporter:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-exporter@sha256:94c76b3209ea608961a05559ab45d9d743a67d2281de6ba690236bd54d556642 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-exporter@sha256:acefb825f04c43f8ca65dd9a421c6a0e29387787aedd0f79da934c56da926cc4 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres-exporter@sha256:c523ac33d18c6a5463606fb230f33f98bca50045451e4ffbc1b314779a24f9e8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-exporter@sha256:0ae891f67cf15fff30e04b073a5b408644a83f827503212900e10dfb9a544e09 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres-exporter@sha256:1d2a6db289b5a44074b6ce9b01631d4d137165283b75d592d4d329129c31dac1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-exporter@sha256:46148072f3f2e125a0aa633fc5fcc57f946a5f8cbdbfb91036bf00dd94f86c7f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-exporter@sha256:564175e48f6ee4a615c070e12417b58fccac23f0aa6d92b0630cc1c3cdc99626 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-exporter@sha256:f17cb743171486f97aa067e60dd087d15ba41cea84f2ec1a09676ed2e87f90b8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-exporter@sha256:bf226ea20f62873adb58058a66db52a8fe47664407c219d746d98748ca352854 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-exporter@sha256:29a1e2c8b705f8f8eabb17a56aefed585eeb831d5c026a72df0a656af521063b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-exporter@sha256:2d0519be5b40a51fa150813173b496e0b5a1aa2ca6f0d6ad9f9f93b8b142a1f8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-exporter@sha256:5bece83863b08a5c48d16ba99165c18f6a6efc2ac293c7e4b1b778f7faa6fb72 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-exporter@sha256:a3f39b0ad871fe2ce1ecf17a78ef935e19a83df05f402b7f6550e6baa570d9b9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-exporter@sha256:943b49c0ed8543f64d29b0bbfb243ad28e80cbaf2160836bbcd28010869c1622 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-exporter@sha256:a2e4f9575e355b9d974b04c24f1363159b498766d0b41a120af65bed04898c98 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-exporter@sha256:a99ccff3d8194cee656d337b44561ba65def7e7b37d3e82fb9962abef825d744 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-exporter@sha256:62b5d6aed665604387d2749571a4b485dd7e7cd3b4a5470a16f4dacb672adfaf |