Sign inSign up
Supabase Studio

dhi.io/supabase-studio

Supabase Studio 2026.x (dev)

CIS
linux/amd64
debian 13
Tags:

2026-debian-dev, 2026-debian13-dev, 2026-dev, 2026.11-debian-dev, 2026.11-debian13-dev, 2026.11-dev, 2026.11.02-debian-dev, 2026.11.02-debian13-dev, 2026.11.02-dev

Index digest:

sha256:3044c14637ed848bdca8544858a849113d02b43fd5bc0376fba2b49e7ce38aef

Manifest digest:

sha256:0679fd6bf08c3f49ee88747c27c7bae108f9fd59cd596303c7c2319a80006d1f

Size

98.48 MB

Last pushed

3 hours ago

Vulnerabilities

0
1
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/supabase-studio:2026-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/supabase-studio:2026-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/supabase-studio@sha256:f8b0ea2e5544dd39531d1819a2cdb1b05be5d230c0a20e4991d593779c17d7c6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/supabase-studio@sha256:a7ba7f5990316154f80b4de4b3503f644d5098c56162f632402d248cb4fbda27
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/supabase-studio@sha256:9ef268853cbd65326d08f30cc09ff4decd3067020d7f16865d55dc87792b0eac
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/supabase-studio@sha256:fcab1799cc14f9b8614b31a63b55e50601cd3f4622efab8375d9bae83dccce6a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/supabase-studio@sha256:bf371589227fed8ce12a7623bde1b18c3d89b5b052c9aed38b54cac9274e0a29
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/supabase-studio@sha256:663787d355a68546dc1249eaa0e2981a33c857a2e461130fb74caedc0d27fe8c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/supabase-studio@sha256:3a750b4b54abf52dd6d415ffd20fa6ed38521b56207dc3471781f0d19ef332e0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/supabase-studio@sha256:6705e4c284601f1484f15a4795db3a09c60e481fd502153e57d6f1369923bfbd
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/supabase-studio@sha256:877125959a17968a7560c4cb69f802accf58af9e792f4a400be227e4876e3cb4
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/supabase-studio@sha256:ecf0e23d9deb2ccb9d3c300988d1464018cbf238e4778c85ccd6dd59171bf5bd
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/supabase-studio@sha256:88bbecc5fd6ba1b39cc633c7ca499b6a0c68ff6e627676a8e31321bbf33c2e9e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/supabase-studio@sha256:d8a7e63e8e0e8df0b9f52c49867c8355928c7dcafa222b6d390f7c0ab911e03c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/supabase-studio@sha256:2f3dd4be273eeee78a282fb73a33a25b380dcebc1a824fd6e51514ae9b0dcc25
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/supabase-studio@sha256:7b81aae6a8afe20473c6592e425cb9ec769ae429bea6549433d3e165500172d4
SPDX SBOMhttps://spdx.dev/Documentdhi.io/supabase-studio@sha256:c85ea86cfd4e47f010fce1362f50aa5fa1b32497f55ef9d4a59188132dc9676a