dhi.io/postgres-exporter
0-debian-fips, 0-debian13-fips, 0-fips, 0.20-debian-fips, 0.20-debian13-fips, 0.20-fips, 0.20.1-debian-fips, 0.20.1-debian13-fips, 0.20.1-fips
sha256:0b02c8e5b11ae88b3eb6044ad3a97e0273d7dfaa34f310e7196de96dd8231619
Manifest digest:sha256:eb16d1efe0e63acce5aa6fe560e846918d4e5b273e8a3d283d1e56394351604e
Size
13.72 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-exporter:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-exporter:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-exporter@sha256:e228d552647d5c1c214abf58f048f10664107501065eab3531411c545c49da95 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-exporter@sha256:9c091b64d7a5f4abd6220fb4f610af4d04c5a244422aab22a86c254a0be1224b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres-exporter@sha256:a322b8862da4b436927989eb59ada06a4613961df06e6b7f923eb6e279ceb73c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-exporter@sha256:ec33d5d70d9608f6d002292dd72ca9819a8bc45da211f13a1a3ffb6723f834ba |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres-exporter@sha256:b25ddad66ed0ad77bc26272baaf517561b90b62457ff0b6952e08ea1642b034a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-exporter@sha256:124e221ce51c1dce2c8d13bb98ef9e5f7465d856b48496befa2bc8c82b7d9417 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-exporter@sha256:877029beb32823f35ab313c8bcdc064ef5e1faf41c06037de597f0ae7f855090 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-exporter@sha256:4a30c598554e2415be0347f5ab59a5f9d00b20073d7c1c41db7cead49b0adc67 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-exporter@sha256:6789fc577c1cca52c484f6c1828b5858d2f5035a3bf3965cfc6e81a8400aaa9a |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-exporter@sha256:9c196dea7442d626e6e040444bf89b49dc08af16b6cad0c37f900e4432130280 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-exporter@sha256:f6107ed590817dc01bdd7639e29cae8dc2428d4d88f8a228c96098626396bc29 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-exporter@sha256:0d6ff9dde287bb17f4c93bb5547a2318f98687e464dbd48e7f1f73c283e4de2b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-exporter@sha256:f99d555af310924518f4755448994f4bd9d47c496c8f3af938c720cc76ef1441 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-exporter@sha256:4e6b5c34cfc04c4746e257db53149ea5acbed5737b23c452d5c1ebfc4f0f113e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-exporter@sha256:a8eaaf6cab428428afaed294eee1aec1139b322397520b7d5c1fcbac77d2128f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-exporter@sha256:dab2134b3d68b18dddca4afd143fe878abd37cf2495970e3c1a9e981afd6fd55 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-exporter@sha256:82ed774a69c88c3c19a29abfdd4c04408391200d2a82c6d03213f15a57f4a746 |