dhi.io/postgres
PostgreSQL 14.x (fips, dev)
14-debian-fips-dev, 14-debian13-fips-dev, 14-fips-dev, 14.24-debian-fips-dev, 14.24-debian13-fips-dev, 14.24-fips-dev
sha256:9ced3c462ef82e6f18d7e45dd12159ee66d1de5560623674ab40e27d8c8b317e
Manifest digest:sha256:83984a7b60db6fe1cae89217621c09055185cfe00f36043d647250915cdf5e2f
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:4e071ed4b2c85cdd72e9b34cbf52e514d0f3dcdc8c51da6a0447c1ea6d17eb76 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:febbb404bc1c981ad3fb9b70cc063617e6745788aae81ced33ca37344137ebc0 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres@sha256:44c89c556cea4add35b590f3f5bcebccc9d42427ef00a0b0dca0f011ab71ba3a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:ac16d375060222922f1412d44e29eea93ee3800775eb80294c9f594726d3c5ca |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres@sha256:288030775dffdc0e48244257b5d83b9d526b46f0be6b6e03c1420ecbe09f4c1d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:dcdb0f29379f4593df295e6a925ced1b2e57cf66b83569f274ca175b4e62c00f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:5baa036300857d02a1d081fc28fde1f16c84e3429312fd0a99d1c31bf6384b85 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:6694d9704e6b370551c464f03f7790a80032048d39ab698d3f92f66cbd999f4c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:652fda24c4c90a335fe7f7d4dfaa3451d07bfcfe06a0bd4f41ba5e9fabb3c105 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:064ff3192a986aa8a2bf99323df7da74a1ad2a43ae18f0ee31827b1aeb86ecf5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:a285342e9c2d22b231db0fdbb0c0ee8202cb090212e36fa65172681c82d74d7f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:76466d1f31bb9111f4fc15982f61f0689cfe37fd1fd40a73c9dcd7f4f5168be4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:16511fa5fe7e2b82760da09dfa5dd6b6145cc9415f25797c333dd599481bb832 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:3440f2d51ea44727054a4b2672f56e58517f033d2a876b205ca87e8764dab91d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:42a1bc639c1e3f48187341bf08d29ed34f135146403da6ff07cac4e5847a7dc5 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:f896d912a8e2582c54a1674c0febe6659a7c364a7bd7ce03f39e564a64a15501 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:bcf36742888c1ac331c5186b515d38f2cbffe821c2b77d4b4b5af7d903a14376 |