Sign inSign up
Supabase Studio

dhi.io/supabase-studio

Supabase Studio 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.11-debian-fips-dev, 2026.11-debian13-fips-dev, 2026.11-fips-dev, 2026.11.02-debian-fips-dev, 2026.11.02-debian13-fips-dev, 2026.11.02-fips-dev

Index digest:

sha256:06692844fea3d5a3ff03f3890166341a0383c9636e4c4b68061aa591f42b2d57

Manifest digest:

sha256:6bd5943ddd70fd7f90561d8d9b5275c6517dd623ae56438046000bd5b0cbe75f

Size

99.26 MB

Last pushed

13 hours ago

Vulnerabilities

0
1
0
2
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/supabase-studio:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/supabase-studio:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/supabase-studio@sha256:ceeb385008acb0cc3ad0a48c92d998d009359d0c24c6ea922e8a0d1ec516d14d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/supabase-studio@sha256:935728d5235817f8acfb66297ca33f8c90f00b53eec7bae5e9910f0d564bd72f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/supabase-studio@sha256:adc324ff31879397a211c9a0830ea2551146ddcc4ecc6649a8b684ec88f98812
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/supabase-studio@sha256:0bb9a341bd075babc51a9b834b8e61c9a9d4211ece8d79dfafe72b3bd85916fc
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/supabase-studio@sha256:9bab630bcac050611f34428b48e49e96ec503e263bcfb211c231e42ea7af4ebf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/supabase-studio@sha256:2220ed42aaba2a1be252db099c2f34cb3019c6222c07af5cc6cb0069e7b37dfc
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/supabase-studio@sha256:8ebfa9f24507ab0b6ba1b73f068e93d995e214c41b08148615b775aade2a8c9f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/supabase-studio@sha256:7a4388e1d6fedb4d0053e6d81420ac1e6888ed2574f7dff5e7ac5ee1bfe3d4d5
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/supabase-studio@sha256:839057dfd41abda8f1ca8366ca1c5be6ed327c86becdee75e650ca6ac716a457
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/supabase-studio@sha256:290d9f204ed8e73fd20434a25d14999a1fbbfb11e517775efa7a0c0926ab50bb
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/supabase-studio@sha256:8531ffca71f904169bc221e3367b2e6e939ac1b94120bfea9ec4e5e440f9f549
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/supabase-studio@sha256:70672e44c4b149f5bc1692b6ce46a1422bb46e2791743921c80442a7cdb53561
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/supabase-studio@sha256:4001811210e90dc0ebd5d39e19d8eb197ba6ec01de56726581ad15954267e753
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/supabase-studio@sha256:97cc2ed8e52986a68ec117e2e309bb934900002d97ac33c2c196bc0a8f42c2c0
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/supabase-studio@sha256:9c120e988004b9daa0d53e661b8e08c23a050108d3f28af1803d2f0e5bb81a95
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/supabase-studio@sha256:8827fcdf6ae938e172e735ada0634a949f468814d9b8272bc0ea7cb6b1c69c68
SPDX SBOMhttps://spdx.dev/Documentdhi.io/supabase-studio@sha256:865c1e9ddf0c57a4eef550c29c5c9fd470ff5bdafeb7601c6c95dc049482dd7f