dhi.io/postgres
PostgreSQL 14.x (dev)
14-alpine-dev, 14-alpine3.24-dev, 14.17-alpine-dev, 14.17-alpine3.24-dev
sha256:74846fac8d14c43267647b440c618456dba3a6e791e20c2097d7ed1a56facce6
Manifest digest:sha256:d037d01f575ff404b9d26ad3f6312840600d816fa7b50bc4fa2a8afc450c30ca
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:5a116051535ac03a8862d72ff80d9ec1fa630be64370dfe126cc9a1e2e5ecc00 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:51c911fcefdcce8fe1b78393c6b884e61f5ebc345668433fbc84c5afe46eb2e5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:b20b779690ad7730e14c77c5d7ac806f08be22bec7539bbce82db5caf13a6d38 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:1d755d2a7884369d8e75962f5710dd7b298ef27a98f35a3288996ef10f4374a8 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:d1c2c12be4ff239fb32775765bac3822fc89fd1ce69d7c9793698294d1d86ed6 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:1c65a9468e2c1dec8ddb433d64d1436f97a74ddce9758c8309c0bb0b178e0cdf |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:28a0e96c3320c707ff2464687f4d6e07bb54f04feb1a3c322a4ce753a3f52d4e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:815b769d08244f28246790c74b157879488bf83aa80703aa64d080dcadd9787e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:db288600d04854b0939049992cdc35a503baa1a7effbd09a0943abbfc512bcf5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:a00a843718b635d8bd4dce95d116ea01850846b5f2c8b703733ebcf4f914826d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:0f7c7e77c84972961633eaa94ef226406b0604dc1cbe08eb4dae14fc628b5a38 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:3d2d87e41c759d6ba75c4c9a8016de5444132d4f04a37c0a0aa4648543c1069c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:876819774c8b499dfa316414803ad29824a7e2c08224a789d598d83b79d4a621 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:ffe3551261fa35f3889ec5c84ce14c969a36965b6179df90e1f5360b31e23d40 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:7b8a88348d94c42be15b478d6b3078f637b7ee0238e98fc8c167e43a86890a8a |