dhi.io/postgres
PostgreSQL 14.x (dev)
14-alpine-dev, 14-alpine3.24-dev, 14.17-alpine-dev, 14.17-alpine3.24-dev
sha256:ba84b69be73e0ff3a5c4a091d4edd45aec596ebc17652b0e7752516f5e073f9a
Manifest digest:sha256:13d88671154ed87645a262cf68d81a3eede8236e7a0b3f9831e1153f39795faf
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:d9a55e4c75dfae331b547d6cce9cbaddfdf1c1849cf61e3b1af89e200e1dc8d8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:f13b09ab7847ae6743210f98959c86e87afd9be536d6a69369fb067dd1567e52 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:3837093e7c350246c3b57003c5162e1ca1c4c5d1ab6a7e93535e13c92d7fe334 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:de39e06243ec970638c487aa6399c0bafa14fd66f40bfde4219a850b1bd6ea9c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:93440f7dbe6f05c3466c22877bf449a8db392ec3bcbd4300682c3d4e94ec6ffb |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:b7b5d44df0eb674108ce2c8991e7ab9d33a8688ea8f4c7ba2ee0fcd2d78b7da7 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:fce804f614e3dc6bbd926111b2691041651f4df4df19725a725e35f9f2d3c42d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:3f4c7d063a313ee6cc2cdb9f8f6aa18da6ee4a3d47ac92dac9a02547ee77a6d8 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:5799394cac1ee5d3fbb5ed0be5cbcef5ef55a6e56fba6fbc4e4b012db3d66295 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:c01c38c0cd1d6781c576e1d494d43a844f0c9de10f687774a86c7ce04c69efbf |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:f56f2e006cad50c24759c6fccfafec360383a65069cddd01198cc25d357db62c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:29f85d196b02dd722a5ff9619df8cc81dc694eea0be964d085885c8d773f70fa |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:a2e3383d52f7c574b9724f969cc6b4a6190b82489d25b028971d3e8dac2260a2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:0c6519e315ece71f69ec5903837f354f2859c96e5a0b3f5a912124ae51c79d19 |