Sign inSign up
Supabase Studio

dhi.io/supabase-studio

Supabase Studio 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.12-debian-fips-dev, 2026.10.12-debian13-fips-dev, 2026.10.12-fips-dev

Index digest:

sha256:8fbf6fc433ee3008c116c3b6913b425da13964bee73f4e7f6556571176d740b1

Manifest digest:

sha256:7ad8409e097b6050e002e1841769a96ec55970ff54906529ecdb7d0d09cff386

Size

99.47 MB

Last pushed

8 hours ago

Vulnerabilities

0
3
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/supabase-studio:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/supabase-studio:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/supabase-studio@sha256:60866548d833ccdcc974bd953b5f0e26ca9c9f08e49642eab0596e516a49c86e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/supabase-studio@sha256:bea57e4e8d66fc4a944e84bd1a5298f6efd782eb57567b7a390a6637462c9d72
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/supabase-studio@sha256:d7f9ff867ccc019d54d6e40f4960416e7198883060a8e5c768d59fb73b61c48b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/supabase-studio@sha256:7485da4e716eb37bf06e12dde1d14420816087907a06e3586a6d495b781f33c7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/supabase-studio@sha256:87fb748f470919a8816592429915d241704754347d7d025b8a3723905b39a177
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/supabase-studio@sha256:ecc2532dbe5e8f1b181cd04ee950ea11cd05f13130a26f1138ee3afa2fc86ca1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/supabase-studio@sha256:79ba122377034688d9a7b3772449c9fbcb191461c74c0c78070a5088806ae04f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/supabase-studio@sha256:cd57ac388bb971f810cacaaa783b172fe468c745ca3a7f232594571b4167891d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/supabase-studio@sha256:b63256b5452882e5a7ef735b3fd7efc4188e629800e626968eef3c5c1fefb272
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/supabase-studio@sha256:264b8a5188f19da1cbe07d3d03dae852c627d16f9798dcc52bd7593db71a7944
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/supabase-studio@sha256:3b9a501a55dd86ec1216b531406f25c0ecaad3b4ec545dc2d28bc72215c410ca
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/supabase-studio@sha256:bbbd7b7056533121607cfa0d0c805fa3a8476392c98dc4f016e7da50622160fc
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/supabase-studio@sha256:a50a837e77870bf9747200af226451581c6f58ea9edeba99697222a080c7b25b
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/supabase-studio@sha256:440af55deaa145efc7cc5cebbfd49bc8a771f628e56198ef1180daf8a62b5faf
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/supabase-studio@sha256:185fb1211809eaae08d6cd134fc19c797a3c9c79ca91ab0fa929ef44973339fb
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/supabase-studio@sha256:4f722455fb36e6410869136c2a35766105c72e6abb4dd1de19b22f2d08fc3b16
SPDX SBOMhttps://spdx.dev/Documentdhi.io/supabase-studio@sha256:7b7829c945c476ad16fcef0d79baf00e804e4a09d96be9b6ebf587912c32e27b