dhi.io/postgres
PostgreSQL 14.x (fips, dev)
14-debian-fips-dev, 14-debian13-fips-dev, 14-fips-dev, 14.24-debian-fips-dev, 14.24-debian13-fips-dev, 14.24-fips-dev
sha256:3d4b6fc43be3f0e0d0cac9b6ef9def7bba1ba9a5492908c2e7fe7745e52b14c0
Manifest digest:sha256:9a70a1153346ce7f8de9dc7032ad974765bd6a95322d4345fa060886f6481e13
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:ed10bfb22764d44b171877e6db6dd8a7a78cf63df952c346c3e562374d9b0c53 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:9a5b1e93ddee64429e6b265b266d46ae9b18935da3a7bedb4c9c761fa5e561f4 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres@sha256:d83fc3309f0f5f3dde232106a0cdf92d2a38fcaedab073e881b02e12107ac4f0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:540f9e806ec57f04d80c1f2d5a9f3028647d092991dfd216334bba67adef2009 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres@sha256:15d7d813943a7eab074f59d6e53b2c76220ffaa806f965818a577e4e910ad7ac |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:194efcf200ea37e3b514995a65cd5cf404553328a0b5337a8411f778ec0ba579 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:59d85a2fbe250910efed2825d1b4558396eb4be0fa696ab12dfa075ec1f3347b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:d40434991506c4c1be708f860b4158c2c469ddb76d2bf4ea79a79c8204659328 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:b95a44efabbb3617f279dbb9a68c43777345c33f6104b633190cfd9bd31518e8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:b634ef11de24c8e416e71d8f6e0824d1920d5bb58bec112c1af5b32187989a00 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:066e67dd494def838e29f2b4dd2f640d15c18d77000cf566a74bdb316f07cd9d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:3389fe260f0907e64f6ea30f533d4e1f4e636c53198ecb899fad7e63aa391440 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:f92cb519a72d8e0533e89f02b4e04f1d1c753b219b406a097d8a34901f4db0c9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:9698f935a5beaaadbd59dabd2fb482536fb97fb9c7747ed1756e14cc2d0ba250 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:175c0c7ceff31a3c8924b43ec2fb55497b332465d76f1cf6c62c964681c62fcf |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:5dca44840eca2410558267833522d7378952be8c016f46e3017e7aa5adbc9fba |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:e45f98a7d3a9bc8d1796cdbb02dbe7d2c859db303b992376161ce82231b02e6c |