dhi.io/postgres-exporter
0-debian-fips, 0-debian13-fips, 0-fips, 0.20-debian-fips, 0.20-debian13-fips, 0.20-fips, 0.20.1-debian-fips, 0.20.1-debian13-fips, 0.20.1-fips
sha256:8978962474b47027a25bf4c871a86fba24adb2949cd7cf193624f68862997a04
Manifest digest:sha256:90f22dd3c3e05912a19d4d6b544c8114b17e3f8beda21f8d356ef2e398b8fbcd
Size
13.72 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-exporter:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-exporter:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-exporter@sha256:6582e506347a5a42e1e5b1f562827f1baa801db77d91d84141174e95f44f6a12 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-exporter@sha256:31dce26f1dbda8243a01824c500f9ce3c4474aae35fa133cb7a0a32ef6360689 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres-exporter@sha256:9a2bca4675349ced25b30026b92dd348e740a985006704eecef9455f8306211a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-exporter@sha256:894a119878b124921381005f1608ff1cc4b461f59bc7725dd0d123ae0f5d9950 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres-exporter@sha256:9a1c3ee98549a76d39ae353121c2ce45f9ef1992611541c50afac7259f53e04d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-exporter@sha256:8a4dbd9970952a610f558782c42c660fa0744e6ec98b0aa5dbc65e299fbb6c0e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-exporter@sha256:5c944de4343b6e281af8cca66405985615ba5e5f08c75e17e0d02972d8ee826f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-exporter@sha256:bac869c81c79dbaaedde0384a02988d740284e48f68cdfe59d37d2940e1bb668 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-exporter@sha256:27e9e951b77866e1165fc45798907efdc2f4bc3a1e5cbd6df5eb7ff6e85187bb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-exporter@sha256:902070df877dc37ecac5d01ec1c4f43c58a819bb857b909967e7a450cb607b01 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-exporter@sha256:d44dfee6f14cad1951b0b69eb7fcf7efc5847de21d48d29644e822e427d43fd1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-exporter@sha256:ed68955f7d1347ce9df5a939732d1e1ed6168d7fc11e838bef9f69c1fe2073be |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-exporter@sha256:1d3e2125ecd24bf4863d81350bf96cc7bc9f06a64163536edc465c05f31fa7a0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-exporter@sha256:50b155f111c048d0b6abe509fa06c0828ef9ee6c2058c0c34b26dde3230d692d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-exporter@sha256:e2ecd99b5c36a4d410498dbb0875f4549f4789da7529058019371fd3c449a5af |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-exporter@sha256:957808a8269e34b97ae22c26d1fd9be9de12500984b36e61f4cc643b77304286 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-exporter@sha256:a2d0463d9dbf35e29e539787b269120c9807c8eae5e2416a0854c4d4ea6bd427 |