dhi.io/postgres
PostgreSQL 14.x (dev)
14-debian-dev, 14-debian13-dev, 14-dev, 14.24-debian-dev, 14.24-debian13-dev, 14.24-dev
sha256:b62b72568bae940c21f2b9c0f53f1985debe6f864633e72cc374706f341f9327
Manifest digest:sha256:7a770c1ff5eb35b6c20ef1e6c45b91cbb162e7bbd05fa59f2a1239aeda22c354
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:03c9f5650036bd9a30a923ec143692a6589f220e08ca3970d7daaac01737ab03 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:57cae10146c2e94c6d3431d2c2b2488fd5ce5192ef6219897754be6796017452 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:4ff8e6c89298b75eb06b6cd9402014ec7a9d400d1cd9ed6a5ba8b7e3e190bda3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:91951c3b0de7d4777bd8ba77622d32b23adc713e6a115f0d37bd54e8da0038ef |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:e8a3cfb3beedd211fcb0cfbd54f5a951b73cf00e9b22b12b582e52b22fad7d78 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:1688ec446bf0ebd35b96d0453b11eda5c9b3e5e4e3d25bfef1d838d148bc2e39 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:afb03f6ddcdf72908f1655a544647a4a66ff25f3c8b8ac78c9aec8623dcbbb94 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:6dea3e862bb9215a1057740e2607e8b8c2d4e44e6e606e0e3d6b156193f6092e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:de56f8be1edc674a0728a85680bb3e6c1262b04c0013e7e94e22767f15d07d33 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:58b224e2f42a98755c51df57a3812435ca5da63d5cc2226c6f9be8556af23d27 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:bb1afdff529e30c1b0a9651ce7db5f5d90ba89cbe27c09bc4cf1e35bb7d48379 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:e81c84413fa76382daac5f43e644ab1627abecd4837fd099783734b81afce76a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:7b34430c516a6ff2417bf9b3a32feb070c66656e01dceaf933309793610e1c02 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:7555f961bfc42141afb3452cce2adca3b6641fe303780b7e63e2019be05396b5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:56fcdcd59f74ed09309c7b75bba1146bfaac2d0805875cf9a9aff6b78e75d153 |