dhi.io/postgres-exporter
0-debian-dev, 0-debian13-dev, 0-dev, 0.20-debian-dev, 0.20-debian13-dev, 0.20-dev, 0.20.1-debian-dev, 0.20.1-debian13-dev, 0.20.1-dev
sha256:db383d9213c8b9b9060f89da0727535054d13813fdc01b57b24cb03c207ee8ce
Manifest digest:sha256:6cf5005aee22192ecb58aaac43968032070e6ca4c78ef348478dc7d8225855c5
Size
32.74 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-exporter:0-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-exporter:0-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-exporter@sha256:ad259935557269da380062494046b81083be2a68036c742bf34a30a1f03ae51f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-exporter@sha256:64032d0c06632992611f122893c4362e85fae49dc7b02e57d48fdebd6fbed6e8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-exporter@sha256:06029282901ec020ea0b214f36e2c370b444da559c575a0c6f1e2c6a21e51054 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-exporter@sha256:4a4c21a1e36b8b46052247b05f2bc8cca9010b0213b7ecfa1aec7adfb9080f90 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-exporter@sha256:f36e49c1089f85d758dd254cdea9a63934b2169a375044450d6f16509b0f5d91 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-exporter@sha256:15335a9d5aa21be48d66458a78bb0c2ce9884c5a5b57d95eb098c63a29fd4a07 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-exporter@sha256:d0f2976bee99feb786c537dff08b1ca40932aff9015180a068ca25d5087a061b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-exporter@sha256:5d16867bab2b972790a32cfb9e6b5804b7f9a168248fab8720a5fa97e2336026 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-exporter@sha256:3c1695c2de139c712a8907dc895bf7a369da042bd69c249ba3f7c25a6b99374a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-exporter@sha256:0d6d70a018a8e1e2e081ce4f9c68d2496ef2f85ec685d1ccc59d057023948611 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-exporter@sha256:fbf4c8ba1c7ffd87644e2b57482aad6ef38bb2d2576371ccc7b973c5648a0110 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-exporter@sha256:693085535ccd743e5673b6de6a4272f16fcf0fce480c5b5ac4316d9c929397ba |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-exporter@sha256:adf378f00122a143d950bb98d5b7141ccccb19c9d187f4718371dd6fcf6f7d27 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-exporter@sha256:de7ad19a3d673794a8d04cc9ed45df1f37c8a6cdf8a3231fb3fd22f4ea51339f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-exporter@sha256:e471e1bbbf046c3ac34467604caac95801170cf99890d9ab4f518141be8ac048 |