Sign inSign up
Supabase Studio

dhi.io/supabase-studio

Supabase Studio 2026.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips, 2026-debian13-fips, 2026-fips, 2026.11-debian-fips, 2026.11-debian13-fips, 2026.11-fips, 2026.11.02-debian-fips, 2026.11.02-debian13-fips, 2026.11.02-fips

Index digest:

sha256:5db01a55d78831f01981cf5483968e137f8ca8a9278671137f7c7a23697018ff

Manifest digest:

sha256:489cd8a82bd2bdef261010ee79b24ebad5f44f86dc1e0afb64b704b4a9701c32

Size

85.12 MB

Last pushed

15 hours ago

Vulnerabilities

0
1
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/supabase-studio:2026-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/supabase-studio:2026-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/supabase-studio@sha256:a779f41372f1c9fbc097f6d6a17c375e09a0ffbcf16295d5b32b232232c3568e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/supabase-studio@sha256:0ced28a83aeeb0631b26a9b31570f0ec2a12768272a7fa3b6c4be10d6887dafc
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/supabase-studio@sha256:b55a12624dfe8004e3b2756d730b39e899930ad07464a3ed3372828eb8a930ee
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/supabase-studio@sha256:12a6d9730044962bf4e58ad688a8cee7fb8e946dbd75112bd767880feba8d522
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/supabase-studio@sha256:1a3edd0c56571e367d112798cd0f0a8f15de4917ff64300d6b22aff8ce99c0e2
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/supabase-studio@sha256:8b6d55351d26871e68156bc9392e11f402dd94d65ff59a6179fdfb445d89bed4
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/supabase-studio@sha256:6a1b2735f2f400aac0703ed38abde6c458b3afbfa00e029bd65dcc282df01510
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/supabase-studio@sha256:2b0dac484950fc59abd9ae19b1770116f2e0c136f116c6e4e2e0e0a2891b6f73
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/supabase-studio@sha256:2790ae70f15c93b41264b2a5b5dc1c9e0c25fdacf67232b7f85c23e29276ec27
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/supabase-studio@sha256:ac6a2029519cc03dfd7e9d1f69c239e33543e40786573c9ca99d7bf7e16d5d6d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/supabase-studio@sha256:57602d1cc76b25feb4464485a5902077e806421c33b295fdf0dd3fc2fca07965
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/supabase-studio@sha256:bae3961dab98d7594be05927d1d0322afacd5fa8ddedaab89a1dbc00ad950803
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/supabase-studio@sha256:671021c40e9a84dbe34c08021312c1b38103d2dc77696d34e68a51903614ee0b
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/supabase-studio@sha256:cbe0de2198e8a2b363bb8aaeec935ec36f525f253dfe7660ebf70fd48d458be7
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/supabase-studio@sha256:508a461df07e54a91973185cf4802e7138f2d2a8349676895aa9035152b20c03
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/supabase-studio@sha256:c345558d1bfd7405c62e97a89164e8d2891d0d2d13ddeed124d519fb5ee2b4cd
SPDX SBOMhttps://spdx.dev/Documentdhi.io/supabase-studio@sha256:d7b9e931518b740d3b887c0d88775aed2189904615943f8672570376b93d0355