dhi.io/postgres-operator
2-alpine-fips-dev, 2-alpine3.24-fips-dev, 2.0-alpine-fips-dev, 2.0-alpine3.24-fips-dev, 2.0.3-alpine-fips-dev, 2.0.3-alpine3.24-fips-dev
sha256:17855f511173af4aa0b6a0318ee1db14ed095351cdce510e7c0995b157662342
Manifest digest:sha256:058569ecd4d5df0ece4572c1b901f0ba4c685ffddb105a942e0bf438e0426bc6
Size
41.37 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-operator:2-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-operator:2-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-operator@sha256:8c22786ba3e2216d7b37fd6dc47d2a28d70971e2158bb2a0ff9d0f007528321d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-operator@sha256:7b45d5868e41f41c8e978d74451cbe618a7ca9123f11e96c6f776bf4ac187678 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres-operator@sha256:160bda722e22c8e1f8c9fa941d7ed1acfaa61b647ad615e3a1bec611836abdfc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-operator@sha256:52749b4dff06db88d36677847388a30f3df9a3ca64439de21d75fc74dcf77880 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres-operator@sha256:4890134747e05926a31b1a9951ab322a8ab245f13f871d77285412c67704d328 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-operator@sha256:bb2209ae8dfc3a3b6dbe623de2b3c4e1908b05cd293368399653e635c6357800 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-operator@sha256:ca44fb689fd762a343b704d3a427273ede49387f647f57dd8e3f72a5c3e40f02 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-operator@sha256:5988a7e60689713469b2fd9cb6390a0f5bd13d5baeedee9e7334a8346545013f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-operator@sha256:bb949006af8c3e1a9a9a2814902c860df14704bb3d6bb577e10bf831ef5b0de3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-operator@sha256:cebf2147a515c215de6a5116ed666727c672308713dc9881e7f963c4c38bec5d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-operator@sha256:71d605aec21492277c664828befe19d6c5a1e9d50766f5f967b62c6f1262eb36 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-operator@sha256:cb01bfb914d1b763a06da6dfff684c45daee38033c30d7a63812e8f85b2b84e0 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-operator@sha256:6f0795cc4a4b15081361bbde25061416413801bc71608b6e67f7ee3e9e0f1f84 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-operator@sha256:6eeb649c12ed53deea16390af4af5e9ab9583093be485004a4de6daff705f560 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-operator@sha256:1f6634f0baa8a99578653a8a09abbafecb1aaaa371234999cac0cd4595bce7e2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-operator@sha256:49ea80c513ad732779aef8340e42e7ee6cf31614bd581f2357ff82c5f07e86f5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-operator@sha256:f81cdc005a45d81e69074fe669444bd5d0cad25fde26462ca6259f90ef33a85c |