dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:2b819302429771876f8c1e191e3c65c384e8b4a06fe431a3e4b3cf2bb9e0058f
Manifest digest:sha256:bdde5faa30aa2649185f9c969e73d17951cdddb12a432c8cc4a5ecbf62313c72
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:64c1f4a9b1ae951ece5839c1682f4c3ac4b3cea03932ac77b0302bff000b7521 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:06c267757cd70d256d4296998306c42b9d78f0bc3d852f17f9453b96cc5b6a3e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:4a0c4c6f6b4483ce3a613320c22ff203f66b0ba8f97afff609bc6e10888009ae |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:52d7e785cf67e0f77027feeebef85aa8af007f8ba2ecb193debaadc181db54a3 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:31be01e752874f36e86bfbcbb9ebce0edc3771db31938c634c4424c6a7347574 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:86664d57a346ad0350ab59e4b6503359a1123ac1906d8c344a0f3038f97a8c8a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:3f8fe21c7f6d13ea46205a40764ef285d3fe4fb8b06f2d0cb81017a3a444c77e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:55db1f331595a7cc5393ee476c457a7152edd2c3883bb41f7030e3472cf6fafe |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:5c1beaca5aba1e292e52256a1a549e40083e8654244a7736462f105da6cf8cc7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:279ca578aa82c2adc0d83ca06146ad95791172091053cbcc8bdd4fcba6bfdff3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:85880096e51f5449a863cb84580df39087522691231d23b3d318eb8c12ae8d97 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:6aa28237a3ae069e9c300b8de1c0498c156ef6cb8921bbc66b71ebac2fa64cd5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:7968742b0aaa71f2a88e2ee416a28ea54ce83ed9ac9ad564dc4c54f273cb22a1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:d0673b6a801f22da2befd429d71bd1a29c6a2370f98ecc85c041b11e36a4ffa4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:72b60c132996dec95d393e2ed7165f469dd204d4f852e45540c466db5a90c333 |