dhi.io/postgres
PostgreSQL 14.x (fips, dev)
14-debian-fips-dev, 14-debian13-fips-dev, 14-fips-dev, 14.24-debian-fips-dev, 14.24-debian13-fips-dev, 14.24-fips-dev
sha256:ae394eef55fa18654f3def710ab8da9e668b48d2e9aa86a3cf9c64008a47cb37
Manifest digest:sha256:8bfc74630849e12758f486fd80bce07374986bc1e7d3269ae24980191e0e7114
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:594fb81f35366bc3a28fa62f746e322eaff0c8556bee3215f29ae6afdce0bc00 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:8be97c4f0113f62bb87ce280fcbb220a8cf638c5617a4dd6eac5ccd147905e2f |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres@sha256:19181f10bb2211a55ff126bfbd2b8017a81b5036522d05deaea6d95506c2cba5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:0670011e2be86b1770e9b0dd443674b16240f877aac8b19f3e9f831aea52de43 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres@sha256:1a0afdc6f421253948ab7f52e2a4ede62de3ae0993953d6da2edaaab4fe3b98e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:7fa96f8d9e43fa9413de230e4acae305afe9197409478f32ac8efe4ecbb7fee9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:491134e4e80cd140913afc6e378f2bd35f9cffd7afa99c27978878f426fe409d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:a91aaca6b55c0951e0d0b8adcf7a498636ea5bc6c1dba1d93a0c99b85fc9bd38 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:4373c152ad2d95a319b29612e4d2261b71e509df45d9e86ce0f5498997058c6b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:0994babc4e0941f13d154de71957302385165b7db61c3eb2b9e1a5cf28d5d667 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:ae8e38d397c3025286553c80d158c7738c1139c89c6a5f0f843cb233f66e4e54 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:72ac57d4eb954fec72f0d9e4f2fa8aee8581211fdd6295561cd71fa414ea797a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:5bd48e547cd669182c306abc163a584ff1ad27e1ab55731f8b1cbfc899d88a75 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:dbaae9bf912e69abb2096666d769474eaea3f6db764865420a30dbac5e73bcec |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:3739b5273c30232fa860fda4cde07bba0e6e5f40a257da1ce8b15ab68f39146d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:0d0ea731c0a097ea07e06a775b7e7164c64c52a522276885aa2d857b51a62697 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:5a12092229ff2064a9c4e3ba19d2e6c4f31c32a3bd0a6d94df6c16da16a7ed41 |