dhi.io/postgres-exporter
0-debian-fips, 0-debian13-fips, 0-fips, 0.20-debian-fips, 0.20-debian13-fips, 0.20-fips, 0.20.1-debian-fips, 0.20.1-debian13-fips, 0.20.1-fips
sha256:79fa81aa33d2266436e00ff35c8081e04df273f27a4187a81d06058be7cc6673
Manifest digest:sha256:e2cc961f418ef02133eca756d6de10b44e8f03e091caede795a2ea6d9fb32498
Size
13.72 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-exporter:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-exporter:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-exporter@sha256:3e3059a40c23f79608b5dce023745a3a258af720bacd122ecf105b7860a554e7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-exporter@sha256:66f5296a3609e98bbd894b25dc30c7d5d0ab835f56edf49c2b56d2eb55a96172 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres-exporter@sha256:e0d1d59fe92302618e1b1a12ddcd3ca8cb271e14c463e8c2da54dc5e821f4943 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-exporter@sha256:23341a5a727bd6b1dc582638d3b568f23154731978a08941cdf410375a05fb28 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres-exporter@sha256:5d53402c9e4d12d678a485b3cc7d5c97dbd1d07e605c0b724da2a86b623ea23b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-exporter@sha256:657cda403f48b0157f322ceeef5585454cb188ae5547d42b276d15d094605b29 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-exporter@sha256:e129925a1ee78a2a1e68071e80e2d5c53e83af383a09ed30d3e86d0f96bfae0c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-exporter@sha256:a59c80387103e55c4c9f4081eb2bdc55ffc7734553aabb8800ac17cb6d7285ae |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-exporter@sha256:77615521988564661bc8de686b11e2113ab87fabb54af82667220172910a24f2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-exporter@sha256:c6ee9f05ce009a6f588e2a10c556ef58b4a2afec359f244b9f1b27d0f92e2fcf |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-exporter@sha256:da462f72be73ab422eebbd3f26abdcb7bbb44d6225b9783a68d20aff662023ec |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-exporter@sha256:eeb2685ce6403f399dd2916d98621a4b8d46145b1722becabc0bbd892828e45c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-exporter@sha256:4fe1d1e5e1454b330a5d6e01b439abbb17e10980aab6b0d45e1a63e50e736694 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-exporter@sha256:24f486f488b5346ca8511c83023bf03258e0db9f3f78f4718aa557eb1195db79 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-exporter@sha256:0a1aa10959dc2c5136e459e1262191dee7355694e4ec9a07413c8391fbf1e0e4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-exporter@sha256:20062941457bfdf55e8a95ce427f6d951a8958e1df9698213c3d4038ac78480a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-exporter@sha256:f64e431bdb23ae2940621dc7b04f7a04623f2331d335f5a4ea98665c533627e2 |