dhi.io/postgres
PostgreSQL 14.x (dev)
14-alpine3.23-dev, 14.17-alpine3.23-dev
sha256:ea95c1edbcacbdbb3a98bef7c3088baed6fb4cdba76649549ff20553e2e65595
Manifest digest:sha256:0f7ac2c49c0bc41daf144cdbb8884ba21bd59e59edaa84e6d2ab20c19a5f371a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-alpine3.23-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-alpine3.23-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:c50f1fe955823eeafcbc0b6ddf9a59fea68af75ba010be56178bf86fb12e1b9e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:845a0cb6c6e8146541bf86823f86e072aeed76864f38160cca016f877f61b5e7 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:ab42d9f2d013e098c16a7d9af7ed294a6bee891f3678b68a9fd398d56c4df688 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:161bda2eeacf8d2b6857ed35448952f316e3f0e16d2101bbac40905cd8c175ea |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:f5a60c453871bdd2e3b44243a35d44fdfed9b24fd19a0945c27e1f787426b55b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:57eba563124e159a7336c8c254bde03ecbecdcebc11bd142fc5cb92f24c580de |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:14456ec5d63cb767e4965eae0746ef2e1e59ad5f1a7931e276e21ad0876b4143 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:4a726733bf6d15dd003a85b34550d50b4ad2d4d4a450b4ff08df814afc91135b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:4be9f8a49b0052defe04ff48ca8f93d17bb4c2e86664e514a278fe8f7d5b1609 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:7e182f588d4eae33c4f46dd2db4bd568dc19bcb7f5b139b5665b88c8d1480424 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:718433140972f651e985cb4fc384e7ed222bf446c2a900342746183e031a9ef6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:d9cd86b04f80d8acec790b5809a96eda53b1f1ee6a362794808eb6ac70815e23 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:23664fe96c4bcab4812f248ef16b1fe7ca22f2e261551147e8afbc2ee5884910 |