dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:64f8d4495c91fe618b992fad4077418561e1c1f3b0e60473a3e0fae7a3d43751
Manifest digest:sha256:4c087ec094e134f04e338f4e9ef86a148311d48a2f4752b95d0ca36e7a92a753
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:eb1d2d53b5b5fd9cd4b0f3ea8142254f2f8ef33eabf2dd947a90500fb9ef0676 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:6105734335c6d9476cb2dd1e1ddff686f6fc84c5ec1636ae3ad1e4248c27fb16 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:1705d128f21148ded3377f7e84543e8f9a2b2ee8d66c47efbefcecb0dd416264 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:7e856187a497477470cac561eab86f2428e60e99b81c03ff838c53af188bfdd6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:ee99719fd9541251b098c366cf28842a2f0caa430941273b5551ec29d241d9e1 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:2b1e073fb047286e3bf9a90dac32b778ea8b517c7e9b44d5301e95034c0762bc |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:8d63a91e9a3888d852aeb373b2d66c65b3552f6faa047b8e3eb24bd773b5280e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:ca9a4144a4dc9647cbb55bbe61625ff8f3823b18934e3f90116ca08b2ea470b0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:f24d9e3a2bbf528b98eba528f5171a4c744d9ca093978b808ff720fb2ef2339e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:bd9d8cf4e9a3730eee932e7d1e6df82255ee4e38467b915897ca8bbeb638f070 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:95b4e9ddaccecccfb9e940619dac8e2fb595cb060246f8317f0c184d30c424ff |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:25b70522d8ba3977e0d9e61dc826666ce512c004d8f48b84fa1b795a70ab54a7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:21fdbc16f7a126be8813b561bd2d9cbf7421cd6a49b31e14a14fe80ca46b9d03 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:b5ff94f08f19acb9cf3289104a30c88641ca29ab11c59144862d0e94202bd157 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:273780e8309895c4ad5f17a360d4418f36f3f2eab04db8774ce0913b23f74ebc |