dhi.io/postgres-exporter
0-debian-fips, 0-debian13-fips, 0-fips, 0.20-debian-fips, 0.20-debian13-fips, 0.20-fips, 0.20.1-debian-fips, 0.20.1-debian13-fips, 0.20.1-fips
sha256:7af4a214e1d13f72a8c1974fdd2594ac407a0de8693e54e519ffc7748af0be2c
Manifest digest:sha256:bc9074e789db45ad2b3e01cc7bd1f3ad8006107a7416b2ea7458760d8705825f
Size
13.71 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-exporter:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-exporter:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-exporter@sha256:6552e3cce38203821f5e10ba8652e2a8815f936bc7720c9f95087498369e5517 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-exporter@sha256:53387de9896af0aeb16c6f3201f5d905ed45e54b0655bd58b4dcb8b490858198 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres-exporter@sha256:f4700835e95b0ef50d3d692d8934c0621b689cb5dd6687d2ac2a88a7d6e83bc1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-exporter@sha256:c2340a8ec2efda13f61095172b0ef05a6f0943ac713471fb7105a9c7600e195f |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres-exporter@sha256:e087d49e5301022845d32e8165827c798d06e205874178160582f512f8040a0e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-exporter@sha256:0ffebf53b85b3591638acc9199dba8a2e619aee7dada9e602bd9cc92a08dc87e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-exporter@sha256:caaa9270e0e5ed3e8e2a30c6329ed5d28900453118e95ee4568cbbfa285df315 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-exporter@sha256:b8017187ca71c05022f32315b5052a7dd3a4e858b43f5515de62220f7d8d6852 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-exporter@sha256:366cef85abd4d4e4972845e3474f1366b4ad6dbf026febdb279fb7c353b1d544 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-exporter@sha256:002bb2e07c7731b07954322fd5cc94f18b99aa8281794ca95a7fc6fa2d72a855 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-exporter@sha256:c8128ce59c8e78eea4a65efb522c5176ec7050887daf2a40ad4f421c5a3b958f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-exporter@sha256:65b2e0fce5599833c5e4d07525a034dd78d604e5599882401a88fed59eab2f85 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-exporter@sha256:6cc4d6cde85390c98be195be4f5a6a64ed374a122f56c69d4c50834f317f74fb |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-exporter@sha256:fd238b8ea6069a121ccee198ef7771271dbcdab336d745dd195dd23edc3468d2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-exporter@sha256:27f529dcd51c49b191db69d5958fef534e15504409ea030e1f046bac78ab3eaf |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-exporter@sha256:2540d0e2138d1b82e17aeb8ac6b230f839fac9a6f0eca81851f7f7dc868cf452 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-exporter@sha256:84f30739b9a57196cd0a19288fb6692c0d4c09509f4ff781e712104551f8dfd9 |