dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:f2a3ffb989ceb8ef6d7e4480361af48cd693a24e8555715f1e2a427a82307f70
Manifest digest:sha256:815e7b3b552280f9fb2207f3a285f6037038279afb4975ebd6ef1275e0cfa563
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:558c4168f0d31868d6779cfaeaf53793f23d0bdf0b88e71b0a9ee3813073d4a0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:5c627bf0ebdf648f2906302ed752340fe09b51839ea569e7c0f0675cb60c82a2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:10d0e94f6f02f29bc0b985dd1a23373f3a6dec98591858c4b70a67b3cd1e9387 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:637cde7faadea0eca478275be7abd9a98a0d817fb9e277eb552ff850a19485b4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:e75ae9974b5fabe5bf2d6c4a9dc56512cdea288bfff1fe6bd8c883223031d4e5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:236be72355021dcd0c2dfe74563e489312e9a286cd6a3288f1557b6e2e267826 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:f13b94d4c30c2125152a4639dc3e936175181321b072fb3a561d494ebd055091 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:132e7aab96831f5db2d8b7f53bc268ccfe21c300832275721ac5617491e7decf |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:2e17cb3a49110908b5712df010a24f7fe6f5643057b04b679be438ccb9fa8475 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:e1da941fa3255ac2450e6040cf7ae8212da715108d44125a9f3026dafe03c6e2 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:152f9cbd03e88bd796ffa9494c7ffe8685ca00b9388cd30f015ca4cf77425214 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:4ef759f67e1fd4a4d16e8377aabfd44aa087dbf0264ee5daea2968b28e829e19 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:ac27bb22f319d4c01f151500ab8bae1137fe74fcfe884916969f86e91cf2afb8 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:53a7a836639bd1c207bc43a0b7c4e496d133af1a04e076329c0a15964964a0da |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:9036f7c62ce0160a72696c642b06a9e4c293020e41e788aea1bd969d2a9f0eff |