dhi.io/postgres
PostgreSQL 14.x (dev)
14-debian-dev, 14-debian13-dev, 14-dev, 14.24-debian-dev, 14.24-debian13-dev, 14.24-dev
sha256:2da99af590e3aee7d954e765b74fa86b7a0ac090589eb47f967bc1f4b8caaa8a
Manifest digest:sha256:0d88f3b389e66cb81c217507a47122f2284522ac588522f2299eeba498f2c4f0
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:ae95de594a1e46a414812d36d3d18bd723e3592b0e7e9f622c23eaf2e452a901 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:b46ec338d488ed3f15b29746a42f2dfee47bd1bb90451fd7bb55494ec99a16dd |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:6894577f77b86db3e61f1ca542e4b1cdbe307129bf09e680145d4fcd1db9bf04 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:41c9fdb4899a34825850cec82fb68b7df0f8becd5ea592f63c6ce03012166e18 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:07b4ddf11bfccaa656bde6f9690983df37029751a719b58c8438fc4e23da1fc4 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:cb538d8126ccb63a7cc56638b9cdc157cc77fceb3b4294fdd6ad4052ffd9323e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:8a28242c7407642d9342c2cc15dde331c2c199fed888309c78a5403e7ff924f9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:287d333d55ab48d9394ebc4eaaf7f14b9d515e7d5e66e554489c5df8798b3755 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:ee1d10808f53eb015612c6747add0ba06b7d617f2d8184044ca9243f97dc60bc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:a23b1e87d8fda6ad073ed144558e30023bfd94b58ab9e7b8847396f0517f1688 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:c2ca75122e0f995a10237eb031553dc421d4b1c51a0f5ddb93ea081b3f066f36 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:3b0dc8d451318291951741de9b83ea6200bf445f16e7957d472e2e8938ee9a62 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:505e94d1aadb9f9b6a570daa34ae945bb36a4fb43661c1ab9d95937da852e2d9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:9fe39011f1ea9b56f1f6c359ed42b8355dc3852a6356d4c2b7e97947ad62ec19 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:3d55b32612da58e90defa7d876be5ae73d695d0a7de5599349873287a7cfd392 |