dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x
0.8-pg14, 0.8-pg14-debian, 0.8-pg14-debian13, 0.8.7-pg14, 0.8.7-pg14-debian, 0.8.7-pg14-debian13, pg14, pg14-debian, pg14-debian13
sha256:7530cce358215d9cb80f4eebc3035bc41b55956fb58808e074a7bbbb7ac8ba7f
Manifest digest:sha256:c2bd4eaed45315103b42cc61df57c3331cee3554960dceeecf0b64f0dff00b2e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg142. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:5413760837a4a6a9d1a6525a4b222227fb80e445c229de82b5a6d47a53dad163 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:fc09189daabcb1b6ea7cbf7eea8c1816e64cb48ccb5591c2c5d2325dce76f426 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:a4184fcbaec36180bf12dddeb2888409bfe0d5d2dfe3bed7e7ec135fb20d7fc7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:59cb2e913589d8f1081d285122c8b4bc71bd50e18c48cb56b8bd460e11b177bc |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:034d209c0e38e4fbc3e157d614a20c3f25e381d2c6fead5e86fe4d9d9649ee5e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:c4332022bdb8456ecf52473a5a8b8f063a503e43a70eea12c713afe0314c3e4d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:810af9f5a3d7877657b3cdde42b523a47553ad9fb42cae6108f531afa4be5b6f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:745dfd2b7c8a2aff2fd6ddf0800c50314836792f25eaf28bd56c1d7f97b448e4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:391372e3fd7c96d7deb677b0c4cea0abab1f9ba6519038bac0c0558aea30d271 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:c68725d70ec12e4a20ea4909d51f57b09b4f1b30118234c8f9ddee94338b2f3d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:5a28078a1545d0bf0caac8adf7f74dcf3290c9c277f3bcc3e9b80940882bcb6e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:59c8ce9cd15030544c60087058c165cf5d3f0acd4c7504d82251761c076cd6fe |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:30c112d7c5377eb37877e63c0dde6ff4e60bdc56967cea283f05041a814f4260 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:004d0612a8e5d58d8aff12b4f77fca851b7dd357cbf9ee5d6e680ad85eba51d4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:fcd8c8ef1e618518e6d4ec40cf128e2c08458710b1c22b47a7b1876e67d8dc63 |