dhi.io/postgres-operator
2-debian-fips, 2-debian13-fips, 2-fips, 2.0-debian-fips, 2.0-debian13-fips, 2.0-fips, 2.0.3-debian-fips, 2.0.3-debian13-fips, 2.0.3-fips
sha256:9c24c9ea06b3a0922215ef76c588c1c58bd427c6830bce4ab3840d0503dd7d45
Manifest digest:sha256:44aae41d33409b88eea83d3f51cda7b15300099438652d5755d2cd9678d74191
Size
25.71 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-operator:2-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-operator:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-operator@sha256:775b1cc769520c6459de033fcc0b398afa4920f26a3dddab7f3a4e82aec5d798 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-operator@sha256:c3b657036671de199f3d6dcfc8f6048e55555f266a3120c9bf42be8bbab4f02a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres-operator@sha256:36250ea9f51fe042491bc9daeec4ab5c8c06322e724d33be6029f01927cbeac1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-operator@sha256:e963f51a4d12528f9837b6be4fcb96a10fa10c244afff818b6dea1b261343650 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres-operator@sha256:3d109ad58cadf4a1e6c3c7ec20f4defc7df47d076f75e55f45539a37ddda52bc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-operator@sha256:20a15961b1b76b76d8adc85604bf5a7c1d6e2ce9d286118c51f783752c3ffa55 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-operator@sha256:616632f16e1c7348460be4914241a2b2bf2a06f3e8083f3b2c241223e96ecc3c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-operator@sha256:2631a23d6f59ef3f235e5d65ac7da46a34c520a6cf8f37eb36922b411816d412 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-operator@sha256:704c1efa81c9ec8b0744db714bde3609603b95fda3a168df5700144544e1ce64 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-operator@sha256:4711ea50f6279d2ba5aa0fa2f19cdb4557bbd929bf832ea4bb4c711ec18b17e1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-operator@sha256:cbfefed93bed0ebb30cd50ceb7a1737889e7f615a4ee02e7e3822990aaee4c23 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-operator@sha256:09d1810c3789ec3514ab068c56bdb7906e5dc641f6465d5d635ef20e571371d0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-operator@sha256:443b56a1359eac5e92b0181cc4b9c8de84f86289fa1c66bbeea388303ca11fdf |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-operator@sha256:529daaa902ba232f6313dcf5cb18839c85ecc81ae06151a89275e47ec64d1f7f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-operator@sha256:22b9f6e6cc8214af70beff14a354465f8b4a3924059449eb096f4b218098d255 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-operator@sha256:9c3add847e23d2826320e9601e4a39b0bd3d6f55ee1ef7083b2536b33d703ce0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-operator@sha256:992c71193d127525e737def7c38cc4beed4565864215a291dfee4390664ba6e4 |