dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:0c1fcc62e984ba5213fb85b1f7075935ecd4a4d4d926d1ddc78e89938ce6e575
Manifest digest:sha256:7a7ada7f01f645ce0c60062ed2f6a58dd69eaa25cf5ec9beae7fdf474e94d27a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:8cb61b61dc07ebff3bef531dc30fbb4dd3b1896d3e20fac9c5c61d1ff3c07dda |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:1d5d612895f8dd99fbd5bee35fe32e1fb5a5691aa13a6cf901fbc29088d139a0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:a485a07e7e92a217e3ca41905614c5586d1c559970a6bc6a7fd76dad36ea1f0c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:7dc89f867092fe8ac1dcb0aaffeae61e5d02d4141fa31880866697626c710027 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:0de6c5524d17f3bdd849f25fc277e3c9cf4d3b8df22f4c9e3278af9310b1d765 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:eef174dc4543bfbd94d697621f72ec62631068d6f49fc4005fd2b37f468faa61 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:2effe421f743a0659120c5b18e8aca7e057c5e4b21ca91faef7a718cd0a8620c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:147b15132191cbc670f2c63f3092fc6a0631a191b6c034777bb2c1478dc5ac6e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:06cf254ad951bed3f3faad4af451e8e5dc78f3da27ec2d970dbd5e53b03c4984 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:4b7a6e72d9774aedda0567b9c0a51cdee6a0763b11669bd8416fee03a1c8bf53 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:86064837602d634f7b1707ba62b3f5646c9fb5a82a5a44657f438856818e17c4 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:adcadb1630c5115912fe99ee1d06829af573a40e3160b225faaa8db9f95f0082 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:b69e243582cdbb382294b7c57883590dce3dd800b37d201499e08099b12b9ec9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:7f3537cea9b886389f74a3c25ad964bbc493d3bccd50a0aaa5d271da85a6f7f7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:156709da7008289fbd5d82a422f45daedb42c4a2842c166f88356fd4563768c5 |