Sign inSign up
Postgres Operator

dhi.io/postgres-operator

postgres-operator 2.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2-debian-fips, 2-debian13-fips, 2-fips, 2.0-debian-fips, 2.0-debian13-fips, 2.0-fips, 2.0.3-debian-fips, 2.0.3-debian13-fips, 2.0.3-fips

Index digest:

sha256:9c24c9ea06b3a0922215ef76c588c1c58bd427c6830bce4ab3840d0503dd7d45

Manifest digest:

sha256:44aae41d33409b88eea83d3f51cda7b15300099438652d5755d2cd9678d74191

Size

25.71 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/postgres-operator:2-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/postgres-operator:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/postgres-operator@sha256:775b1cc769520c6459de033fcc0b398afa4920f26a3dddab7f3a4e82aec5d798
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/postgres-operator@sha256:c3b657036671de199f3d6dcfc8f6048e55555f266a3120c9bf42be8bbab4f02a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/postgres-operator@sha256:36250ea9f51fe042491bc9daeec4ab5c8c06322e724d33be6029f01927cbeac1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/postgres-operator@sha256:e963f51a4d12528f9837b6be4fcb96a10fa10c244afff818b6dea1b261343650
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/postgres-operator@sha256:3d109ad58cadf4a1e6c3c7ec20f4defc7df47d076f75e55f45539a37ddda52bc
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/postgres-operator@sha256:20a15961b1b76b76d8adc85604bf5a7c1d6e2ce9d286118c51f783752c3ffa55
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/postgres-operator@sha256:616632f16e1c7348460be4914241a2b2bf2a06f3e8083f3b2c241223e96ecc3c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/postgres-operator@sha256:2631a23d6f59ef3f235e5d65ac7da46a34c520a6cf8f37eb36922b411816d412
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/postgres-operator@sha256:704c1efa81c9ec8b0744db714bde3609603b95fda3a168df5700144544e1ce64
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/postgres-operator@sha256:4711ea50f6279d2ba5aa0fa2f19cdb4557bbd929bf832ea4bb4c711ec18b17e1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/postgres-operator@sha256:cbfefed93bed0ebb30cd50ceb7a1737889e7f615a4ee02e7e3822990aaee4c23
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/postgres-operator@sha256:09d1810c3789ec3514ab068c56bdb7906e5dc641f6465d5d635ef20e571371d0
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/postgres-operator@sha256:443b56a1359eac5e92b0181cc4b9c8de84f86289fa1c66bbeea388303ca11fdf
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/postgres-operator@sha256:529daaa902ba232f6313dcf5cb18839c85ecc81ae06151a89275e47ec64d1f7f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/postgres-operator@sha256:22b9f6e6cc8214af70beff14a354465f8b4a3924059449eb096f4b218098d255
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/postgres-operator@sha256:9c3add847e23d2826320e9601e4a39b0bd3d6f55ee1ef7083b2536b33d703ce0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/postgres-operator@sha256:992c71193d127525e737def7c38cc4beed4565864215a291dfee4390664ba6e4