dhi.io/postgres
PostgreSQL 14.x (dev)
14-alpine-dev, 14-alpine3.24-dev, 14.17-alpine-dev, 14.17-alpine3.24-dev
sha256:04d393e552315ea80bab46096e4fd16de35307b991ac9323000f8453c5f1a621
Manifest digest:sha256:dd11fb3055bb5533d2083add07507a6c31b43ec08f7b97558a2fd068299ba43b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:d292107e1b72826147f28e8cc94898b2fd1cb3c3f7141d408a537c593945082b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:5cc0c9eab2ae921213e4bfb4e4a20529b1a98fcd844dc3f0b9b16bbc5cc06cc5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:4ede96f13fc9e1f69e62dbde458206ae5a6138dc661974bb8623183a9b34fd1c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:d65fcece37cfc8247fbd93a84abfb6872cb77a6b7728d5002ef0d806db9b74a2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:f47a8d882441c92520a37a0ed8f5628f8a30c878c0474d1c2796275d515e2c7d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:53474dbafecc2b8b47b5b4123065c5e7322db678989857e21fa88afa50ed9870 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:f13ca4941e1ae51a5940736de321c3a1ee3284f5082b81d0b473284d4618f3eb |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:cd2d7f2b38edda0ef6bcf9dd0f08cdc40c6759da8198a79e37e4e53d23cdf6dc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:c600e318541ee719bf8bad80beb22711d654e6eacc8e00ce790dc968f14c82f3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:730ffde16c5cfd4db73bb96bb79b9801050c5e30b79551335d7df24991d31c9d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:e4e18e70809bd81c0ed1d79bb1e104fed918d85753f118eea5bcd479998014f2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:1a4fc41ba8aa6ae50b1132ffe673832ebe59f0bfd1e05da119fe33cc4caeb5fe |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:042973eb7b0a47876980e02fd22769777729df113e3a2084a9c76fc5799fc25f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:995c958598dbfaf3ebc9539dd97d8cd743cf57455e4a5ef62ed2b486994badd0 |