dhi.io/postgres
PostgreSQL 14.x (dev)
14-alpine-dev, 14-alpine3.24-dev, 14.17-alpine-dev, 14.17-alpine3.24-dev
sha256:a0068699ea333680a7cf4034f22f0efd29262470f014889be94ec8bd0a9e6867
Manifest digest:sha256:553f957d9c62e436588b418ee23cf04392f7052a129e551fbadec6916f72b763
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:6456c015e9342254e046e93ffce9f6d1839c99ac4f17a6a0a8ccd6d02fc8f43e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:9f742904f676548304e4ce73543d524a370be204ceee5561ee448a112b9196eb |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:f651d1ec505ebcef85221d9f647fca1c038a9399b68330eb0c6784adedcfc556 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:03fd517ac1545987a2383edb056128dd2988ce91594861961c0d0d273f60a210 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:5d3786278d53f46c2a55eab278129b478118d459b9f59d542a3658599bf53ca1 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:fafd385d9e8a6762893002396c5510d61461a1fa86b5f9f14e73eb9d3053649a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:b7cde763625e7642685aa9e6fbf6684481811457bd72b7ce5e7cc109d2ab6207 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:d29994a568d7880fbe3f82fdf2d5c1fb352bc25089a3213586242160b9e65b61 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:f037549e5c9c67a9688658b0a46bdea1d3262fa6e11a2271150ef171088e078c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:31168bf9fba5207185c736cf8e3d11b0f81c84e14f715687ec2740a531fe4818 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:004c538f7ee06052fdabd594e666b1662575daeefb99dcdd03390e3ed475d2c3 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:5c1e0e8619babe48d384cc21bc2ca3cb10da331daff87c23331c1e100a83cb85 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:9ca8524ae7ae920cc6c7a975abf256f25d2b0c10469b8027305b89fb4ae308aa |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:6c1a30c18bb72d5216975e860c4b11d05d8965f2ca6da488a4db793e8eb68d0d |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:cd78a15c0d8d4b29ef2e95a793dac4c64df2d9ca9a982ce55810099eabc63a5b |