Sign inSign up
Postgres Operator

dhi.io/postgres-operator

postgres-operator 2.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

2-alpine-fips, 2-alpine3.24-fips, 2.0-alpine-fips, 2.0-alpine3.24-fips, 2.0.3-alpine-fips, 2.0.3-alpine3.24-fips

Index digest:

sha256:2e0d21a842ab5e246ef5cacd11bde01291b87027b5798b9feef48210c9975a40

Manifest digest:

sha256:25e6f010dd0a638d1f508679beb0bc376c19adbfbcf5a444ef42929ea605f9eb

Size

20.67 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/postgres-operator:2-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/postgres-operator:2-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/postgres-operator@sha256:eb49bcd4b9789db5790ef421d39d56dc268a14b304f35be731d5b2d38f92f9c8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/postgres-operator@sha256:1975b944c5d21e684c42f174d394b10bfb627712ee909411adef62108b0fdfef
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/postgres-operator@sha256:01eac3a7cca322a41a53b652e9ddc461dcc0786ebcad2ea7ed89a1c48d9bcd46
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/postgres-operator@sha256:c0091fa5a1e91d45b8f01e09d2ac2d9b5b81cd19850525373b887f92d45fa9f4
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/postgres-operator@sha256:444fee488477a2dd13fffa85ed887a87a60cf5107435c3da449776a2b4063bdb
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/postgres-operator@sha256:7967d7a1472a5ad706770beba3c51821e00480f78b113576c141c897b70718e3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/postgres-operator@sha256:51975452865a1b3f022ffb3de4abc2ce1077a58576a5ce3130860988befa83a5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/postgres-operator@sha256:82f918d5fd394aeaf98d0aa11df880fef96d556af3c7999ed5943458ab2f2107
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/postgres-operator@sha256:66fde65e2dd08edecf28691b4391131005a66a9a3e88a82dad7f55bee5b79394
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/postgres-operator@sha256:7d237feb01f9835f1cc06ed649e1cde0e4dc85eb25c547d1748afd14519055e9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/postgres-operator@sha256:d3c5a60f6ca4517423ce37a393787d69386cdbbf7962951e9fece63a51d8f76a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/postgres-operator@sha256:09665bf9eec1c1f2148ba19d226c972c808662b8d011bf317fd11168f6d6b9d9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/postgres-operator@sha256:c368239a879bd8e8bde0de870c72519b539fc1eca6af4bd873e5161646ad9349
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/postgres-operator@sha256:27e5db94722874f4b3bb10207c3963f582fb612a8faf317bd6da5e6a553fc119
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/postgres-operator@sha256:106fb7a47475e48b5f73969f8e82710dd2b08e73bf5008c5394995173e813216
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/postgres-operator@sha256:ef657871220ae928393b756105c1c2cd36172349c6324c41e885c8fdd3a3a6aa
SPDX SBOMhttps://spdx.dev/Documentdhi.io/postgres-operator@sha256:b61f98b076b5ae63f05f2e1471cacdfc1336b315f0659025b3963c87c6214275