dhi.io/postgres
PostgreSQL 14.x (fips, dev)
14-alpine-fips-dev, 14-alpine3.24-fips-dev, 14.17-alpine-fips-dev, 14.17-alpine3.24-fips-dev
sha256:09f4643882d9e45cad4558f06767c343aa7bb2d4126fb8c49ae42916e54cc730
Manifest digest:sha256:7db7c7b7939a67020244b2f0287ddaf279ea73966029abdf860ca6dada5ef9ad
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:9d321453306c7458a153156cc8176132915e8ccc86a32cd81a10a956979cab44 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:f5798a621263154155eea56f6935581b05c517115d22deb527e07d8b790d11cc |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres@sha256:b50a77206f8de23b8ea512cba2e70dbe87daa085eaa82917e69a3524057c783f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:c47540acc13adde3187b2b9e2bc2ddc35d9399293d90f4f89e68aae99f68503b |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres@sha256:eecafd1bb7eb9f89f6c40dc94c41ec11e16e55d1c81d6fc8dabdcfae6aaa1b9e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:9afd658ab7f8fec47c19a331e48caac40efc7df03ce327f24cc00c33fe25c05a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:e65b872a348834109692a4e4f78f930b06373f125d6c6764194ec49847be83a9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:ed729bb9d24aa78c9040dba36667918f5859c927e67bdd885d54581abe4a0171 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:a3fd9a0ca4181afc366c4de095006d11b126f9919dc24f7beb04d0077be4e49b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:b2ad1dc3f79a2a073bf1188fd90d27b3200c82d597e1432d8c2836e8125f6288 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:efd6aff2c581812c5cbae98569585cb7c2267900b1a565ec346a19a93f9778bf |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:7d9ad3ee37fe668762bc58c363c43b32d0d088c0e9b92ab485ea31ff4484f211 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:7e58831c3d37247afd9773dec8d28e042f72e908cc226676fbe22d063bdc821c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:ecc7cbf83323e8ac2537dacc52817edfc2ff69f37e71225da40414595a1e78b4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:d9ffceaaaccabd5f3fb46bf4c059dc983a6bd4443c21bc2216155ebc9f84846e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:b732dbeb2ff33073de6f9571e504e666b534f09a1561e7c3ff6766f6adcee1c8 |