dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x (dev)
0.8-pg14-debian-dev, 0.8-pg14-debian13-dev, 0.8-pg14-dev, 0.8.7-pg14-debian-dev, 0.8.7-pg14-debian13-dev, 0.8.7-pg14-dev, pg14-debian-dev, pg14-debian13-dev, pg14-dev
sha256:10d2d1e1c94fe4a42b714dc471429195556f588bfbdc5d67879c9cb85b8847d2
Manifest digest:sha256:99dacf71c2f2dc4cb55db553a08049ced958c08f9deaaf0e2b98e1b70de18a37
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg14-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:5d66e8fa87d71a0469bdcadd6ae1c673191735ffd1e5e567fe3a83f364b6f1f0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:0f263caac76baeb24281a08832b98affbd66297c366e70314e94fbeb22b19883 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:796ce0c3454a33535413a18a31d2aff9b9ea69cdb6f45a5ba3ba0d157678daab |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:122bf459d89314167f44a0440f2277f31c97300b76b22755586dfc11a1fdc2d3 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:f51ec6a7de47ab2cd5bb8a2cc4edbe816e5ad2699c7dadca9c92837cdac9b1ad |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:cb39dad43dc981b83e66d8dd39d9b6954b314e3adba48b7e18c01b8997e8a665 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:db4b153b4bc6700c7351b6b448add454c3951c84275c86eb4fa6564637bec34e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:c6de46d24baf714023c3ef9e29f95259d75057c3b7f83cdb01fc1604425f1323 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:979f0b81749955eb92162a427fa127e2afbd206b4a0fbd5c833de265bb1b9158 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:6540fdb3e7fe2a31631e7a5b7effb89c48f7edc9528e9001ac0af67879be55a1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:6e032419300f7de2b57e26434cf9fb44c3c2cc2561f6f61e4663821bb8061e4f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:6af1d2dae0d18af5377c8af5e713b03c971fecd0df632611772443215fb2893f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:17e6e06c08943cf6e8ab40a95b0001fa2b3eab3002b5b9c2b5956714c8680f6c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:15b04dd4d2a87d57558bfe318b3047223072d47c926bd814d0f2a5e861237d53 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:bb0dc03bf686e961001ab26bf7f1675beaac7886256ad415be0a1a3025b3fe36 |