dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:e37f0a79187280fb1c041782449b6bde7d4bcee037033459b48f9ec2cb4fa99a
Manifest digest:sha256:89fef8237a27f111d7e5094e3f3ed6c561dce371168873565ef618e83447eb69
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:d580db5b4e04b7e8cfa23f08550458d57dbd45ee2de9a22993060f15d0caaae4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:731dc64e94da265d990ba7a6d902b695920a0f5ebec943a840e62d6f530f41e6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:1d827d29131db6c6c7d10aeba45fde6e10321f5e49b138ddc3fc0c7f89f66448 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:c2e991b0e3e6e898c9985927c78fc875885791ae97acb5bbf0ef170dd06811f3 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:88442c88fa3e2d3dc58e88f2984272ddc076a2346a7681f467c0e342cb2b230f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:35fbb7a5d5282c5c963ba58fa5a8600cdf894adfbc94066090db9ae554527dc0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:f5d0d8e2fae8b134ecb9613216e324220655e634a14176bce6b6d8f63d64c811 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:f111613219226dfde15b4a37fe310ff8a257d1f7be46e45bfb1ae864670f4703 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:ac57acae1ba4faf17f7050d38b6b7d5acbb1c92a7fdac1550d1c16a1d94034b2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:935f852b85bcf8fb2b796b53abe2c9e138864477c427ba3f3cc9d11e49bc4c52 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:45648d861837873eff41e0203b4eb6800ca32a680bc75a47aba8d6d32072d461 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:e0c47a0b5a693fed9ea8309caa4cb477ccf8957968aea4056986d5ce05f40282 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:30f61e0d76462103554f5a16537cf9c3e0b8a5e0ba059a95f8edecb29ec0cca7 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:6ed1843665c5639892419d697908b5f8f531cd393abd9340b5c3e8b4fc95d690 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:3f52d4d487c49d873b318e37b36d4ab86d898b6ac257de540c7bc938ef6061c3 |