dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:f7aae7a956a79c8b97b3642fef02a40da0fef22d6df4d2beeb2480343abf97b0
Manifest digest:sha256:93692d73d248f1b0345214669ea41290b50328e5aaf698c2bff2ac0ce988b334
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:a96ddd536ed81bfe6638fbde5cb68375c169e676caae5c369a65f718b9ea2bd9 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:0f7ef93bf456e3a1e7ddfb20558d9a3669bc56e7e709b7c0a0a7f534f04c855e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:73aef853309ae53ad77a6f6f8e78ed824576b83644084748190096e1e5109c32 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:7148b84c257b8368c186310eee078aa42aa50064fa34ead726f4891e6ddd2b73 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:6b36175e5431354323c08ac94ddb3b92a6b7d20afb4bdcf6bd05b5ce3b917277 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:d44e59ca30022d2c5f577262b92db4988c88be564c7c5a467eebd68c9cc2f84d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:41663c9f737197826a934f8c7dc51131391900e54bcbd0bea3570db88bdf684b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:d882f6b892ccae8f92aa60043fd0e206886b5b5650acec5e8796ec7d5a146c3a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:047e517f095608633c72215bccebf5ea8f59db505bc4d4e859a1625cebae93d8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:14217d032f2cd74b004403c2ee108f539daed86c26de8560acd7a4da2cb3832e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:ed5aa37bc45033273a3f31f1f15ee0c6ddbced5bbc783ad65d4f79aa3eb37163 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:2b08aa4fb5379e844b34cab375e929b6f05fe67fedfb19b1afcc205a573ef99c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:ff1a49623b87fe73503ab796bc5682d00c4b0064b4c23ed3759a67b1154206be |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:1590b0852f77ba1bc36bfffea67bee23c701ae5697e79a1b43a27706d7aad7e5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:de309519639b0572e58532b771c293816e37ca0113bd5205a85192e1eb535ef3 |