dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:266a6686f4dcecdf327b2b0ee043861f7a9b8400f1d6f03bcfb7e49d5a0dd04e
Manifest digest:sha256:f9535c134c8ecf23dc77d00532423d277df5dfae100ee6a0c3cd5b8c7e52409e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:3007590465cb9e0e21c65317b43bc4c465604918ad10fd1ea6d98c4fef5be46e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:ec0b95a9dd824ab5b9cb75f533c99bb2362acf0eed3a634a425c26cbe10badab |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:37cf19285196a60299136f63ebc626cc3d060eca338778debb53dcc8f8662775 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:a19911e8c3bdaf3211e6a99b4dfe77d62fc23b691d4e81713692992fb6e0e7d0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:55e01f93898265a7bc5d5cb1ab51ee0c59a2f7e7bc2276666401cee2d9eea409 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:3c4911a37a7675862e9a36a19268cb6a5b6d1a31f4fc504eedbfb3b4a3ca69fb |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:ac77ee23e49d3651dfc86a9341180b9a7c1fca71ba2d0c6a6712a965b12fc461 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:52ad762a0db890a5b06d3e2ef3f0d519721a30e156b298a6fbfed0a4de253e75 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:d598ccf70c90217b0d83adf2b9da6bbb3c5592a75fa368d50ea660e9a9212381 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:058f51174b7454e224975326ac558c8019c71c997a2ed882fa08771345cd6e2f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:c31a49e56d5a59b070df56b559f2db9f0311b9f85a50817630562ced85c21e0e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:f068bc9de94d7099b14cb41295e056940272a97569b9efa413a2b66e53455e90 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:19481a501c218c509e69866e1f8c9a100491dc34ad3efc4112cc16a45d270777 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:a5bdb2d7d8254dadac935c5facde00390001394fe30cb7d3ca279e920745525c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:f211075a08857ad2a800eb11fc7e1be413ef87996a483942e226fd44a83f3b7e |