Sign inSign up
Supabase Studio

dhi.io/supabase-studio

Supabase Studio 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.10-debian-fips-dev, 2026.10-debian13-fips-dev, 2026.10-fips-dev, 2026.10.12-debian-fips-dev, 2026.10.12-debian13-fips-dev, 2026.10.12-fips-dev

Index digest:

sha256:e7894860e3acdf09455564cff7e0079ef59aeb374af92a9d4394c2fbd748698f

Manifest digest:

sha256:9654e9947047343b613701870b0f81f7851937ce41d4d49820c609bcdb6a73d6

Size

99.47 MB

Last pushed

12 hours ago

Vulnerabilities

0
1
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/supabase-studio:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/supabase-studio:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/supabase-studio@sha256:940a9029394a4c5350ab3017e0526ece03171061e1c7488271beb14c7c2d519b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/supabase-studio@sha256:b59c1f129128d5199c36268c547f50078a891e9d66cc7bcd13f1a2493f406fa0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/supabase-studio@sha256:a63425e3143b1260dbf4afaea53a7bbf947f6aafdd33ed20dbdb2cf9391ecd37
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/supabase-studio@sha256:7ed6b16568b79c67af3fe5c7185faec59785b7fcdd2abe23b0256be702e9af41
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/supabase-studio@sha256:49b63836e83526adc058e6ec5b0bd1eae4b038e8462e4d164cf63d85b0509c8d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/supabase-studio@sha256:64bb0edab1a86dee24f810079c80b8de1b8bae2ab50019f86316d208940971a2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/supabase-studio@sha256:7c96238417eae3826e554f2e7bd790754a05c4f89010de2130d2c3e7074df26b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/supabase-studio@sha256:2f92377072b111befb0f1ec4b143ac51b90f5c63c34d42194d7e89093f2c6db3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/supabase-studio@sha256:495f422fead4da261aa85b9acf2b220306b737bd85122d11a24311090628ea03
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/supabase-studio@sha256:bbf56df5b896f5e6fb1155749efe678c2844e18c060f5e175d73ac4041e0bf3d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/supabase-studio@sha256:84e8a1fc44fbfdf466238c04ba4da0d78348ffa46cffccb3df59aaf4d55d4fab
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/supabase-studio@sha256:283957d89d6ef37cef24f6d8b654c0be2ee87f8bad40d537ad128a1cfe099a2b
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/supabase-studio@sha256:00fe58a76b591748a45ab6cdb71b84d68f65bfdd7c0dbc2f3217a1e546c7a49f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/supabase-studio@sha256:97c303331840649b71ca972490acd3c3a57ef2fdcded98cd90f30e3d49268783
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/supabase-studio@sha256:5e9f023c957a0bfd25ab27b0c3a60144997ce4e824a278c63e18710ed21e6b1a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/supabase-studio@sha256:801f8f2f83f96bf881a5bd93dc04395a9c04fad55e52aa4a4a6578eab8272177
SPDX SBOMhttps://spdx.dev/Documentdhi.io/supabase-studio@sha256:b099f541056812f230b8004b91ae5c42b411b0a497dedb0f0b23936b265c9de5