dhi.io/postgres
PostgreSQL 14.x (fips, dev)
14-debian-fips-dev, 14-debian13-fips-dev, 14-fips-dev, 14.24-debian-fips-dev, 14.24-debian13-fips-dev, 14.24-fips-dev
sha256:fb35fd66b29d596877ca335935acf151b4b091299e26b26039796642c6b4d475
Manifest digest:sha256:f1eb447cc47bbfd493d60a7e434d4e3dcd3e6ce6550b5d2d6429f78cf5a33e52
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/postgres:14-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres:14-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres@sha256:9c108b8d5e2ea8857a674e003ad7a31ab0440b8a0c00327f500e948c16212761 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres@sha256:a22e49e5847d4dd46fc36ee91f75f976558abda9fa3090a4ab5bdd8c65351c47 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres@sha256:a5559f0e62d612748515fc1d5dc6b3f2c7affcf30855183b07611fbc199c742a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres@sha256:ba24b175027a31942002eae38751e20ebd128083e15fa1a69f01cae64a033403 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres@sha256:453ada203a42228b4c2e33d9726a46a9c7fd8b7d952c4b439f3d21a2025d7fee |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres@sha256:c91f66705dcd41f3afaeeb16fc19d16c1abf9aa8dc611f1e6fd1a3ef296694f5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres@sha256:9098fe082f1744ddc2fbc853ae57f9b2fcd7f692407812faa38b01143825d1b1 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres@sha256:f00658c871e8298f322e9da6c339043f81bb5f88e1e2502140449062834c6f4e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres@sha256:933c6d5547a3b95e73105397b118814e42c1d3e9b19f971e544e88c4f46ec373 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres@sha256:271e3e845180b4797da18b1907b8d3ffa0b65321087ecf801f35cf5965da51a3 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres@sha256:efbece57bffd368e672aa9e30f2e52305781be267525778e942c8982b4b200f0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres@sha256:25a54a195bb04fae34b02543fff5e108903da9463c290e67ee6e9a4bdae11283 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres@sha256:9c20a9d3ffb42c142dd0089cf16f2d049e62b816132a24b18e5939fd570e0e0f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres@sha256:011ea6a2b4d303137a848fbf68bc3e21dae9940fcb9e840251708be3eabd3976 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres@sha256:0e08da1377a21c55b309be31dad40c32cb29c4a891bc50d5feac043e695bc151 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres@sha256:56a9628cb2691af302e54f294d7e7bade6d8fb299518e8426dc9c4f833ce034b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres@sha256:fa47443d223ab6fc39f4223339ec47dac5ab698b7ba1e21340e488fa9f7bbddf |