dhi.io/postgres-exporter
0-debian-fips, 0-debian13-fips, 0-fips, 0.20-debian-fips, 0.20-debian13-fips, 0.20-fips, 0.20.1-debian-fips, 0.20.1-debian13-fips, 0.20.1-fips
sha256:a66a14e1458c10396bc0d217eafe9e887c33057ed09cc9904e0d8e2fae2489d5
Manifest digest:sha256:6d1e2b8c70f56387c4c9267c2f18dcac8eb615a2e0473f730bafb2eb93a71a71
Size
13.71 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-exporter:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-exporter:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-exporter@sha256:008960ebb914c0590acab0573060aa4a58cf0acdd5d839ec39165a20fd6aa6ca |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-exporter@sha256:e2c7d4da22309b0fea0af778dc769931ca5e1a2ae9a770de8ba9cb8c2afa7f0b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres-exporter@sha256:a766d390fa217e40964770c2435fd09c2286382fb95d22f0c29b8b30dd44a852 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-exporter@sha256:d6fb5d22cdf9929ab82a38dbae6ecc50dd0ba4e3ecc02ad9f9515a4a8a34d9b2 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres-exporter@sha256:a21bb514c0bb1f5aa3064c8093b525fe5aab3a684296c504c867bcd8e70a7960 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-exporter@sha256:b3585a66e886bb8f3ae4695fbc936edd6188296a3a665d25e2d920d69f71a6b8 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-exporter@sha256:f1d362f0764105c2659b236605e07ba5f4912ba9e39a998b121aa89ca0f67855 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-exporter@sha256:29c1a6ba18eaff59ae2ee188143bbc58f1cdfa1eac1f4f55a0d73acfb67129f2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-exporter@sha256:ae82895457913da774531a4008b5506f82cfd908d92b29b686df06c68ec21c3f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-exporter@sha256:1e31e32acdcc117d5a81fd88e190a643375c2210df127203299e770606d64aee |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-exporter@sha256:d11274b1af477dd0cb60d20c427d888328541569085cf102d098f6aa618b59d1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-exporter@sha256:dd458783cc2b80e70138889ef1d53a3bdd3edfa2f2f2174ef302e633680eebd1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-exporter@sha256:b765d84ad811e18aa537fc7546a36f702c6e2c0125adfbcdb6058ee1553ebc7a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-exporter@sha256:f6e4987b30b78e20d7224f904b9d9da6b8f20929b0d176346c8a47ec526caf15 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-exporter@sha256:83c633e4ae081d2e8f9503a7626809dfdc8cfae2a11c8c62921836f1e7bd3f8e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-exporter@sha256:5a58015192c4d406aac568fbbb5d2f38df7d75c84b81b4ee50e12b1555f9af3f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-exporter@sha256:4816f7ed795a4e3b71e324515718107967346cf5bb2ae218d0b7b0466d5b3f00 |