dhi.io/patroni
4-debian-pg18, 4-debian13-pg18, 4-pg18, 4.1-debian-pg18, 4.1-debian13-pg18, 4.1-pg18, 4.1.5-debian-pg18, 4.1.5-debian13-pg18, 4.1.5-pg18
sha256:ed114720a2fa6a1885614df904a3b0b87dba75e47dc1a5aa58eb3376a9b08f9f
Manifest digest:sha256:1770e100f3409e6cd0f5948e01142b893cb505755ed632281b47c1ba948b6f4c
Size
163.01 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/patroni:4-debian-pg182. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/patroni:4-debian-pg18 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/patroni@sha256:0b12f17c62cdd443140108f80c2aa7f3bc46b6f58eafdb00dfb761d9f2bfd4fc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/patroni@sha256:3e55d7be0acfabe5c3e4e993c4152dc1bac58279e88fabaf48cabeb0e92a756c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/patroni@sha256:d5130a94579b74735c1aa117ed2eedfaeb0bb0359a1e22a7cd2e31cfa3cc6482 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/patroni@sha256:61bcacb4a2fd74271fa5a30b7418d018e598c248d9f5e01b4732609c881e96ec |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/patroni@sha256:8d7df9052b755e8fc53ca088dc3d0a5ddca7a094701167e039ce7b71985db0b8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/patroni@sha256:15e69c9ef6c5c8459a6422f107d0db0b836dcd6616672188e1aa81011ed0356c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/patroni@sha256:d35ec75b54416cb75458a48f327eaf43d58a6c03fa1e85cd597dea7d3a62a41c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/patroni@sha256:63488b297bf1e454f924adf5bca2a821365c9efb29b79180b6cf3097a0de37a9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/patroni@sha256:e707843026028aa0d583316549a5327a2065ca8f8e541add1ffad7e61c926495 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/patroni@sha256:be92c4f68b56c4677abeaf4e11cd76832f4ebfe4d1950bcc272ebac81fe1ee8c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/patroni@sha256:e49b88a1379a757045a6d836902590eabd625abb51bbb9cc68640e1f339b7477 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/patroni@sha256:7edd845dfe7a8fa718b3a5b59d4c70f5b1c968c21f0ad895ec12e5f2b04cb361 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/patroni@sha256:0f88de6f4d159cdeb36f17f5716642be9d6dfb5f7a94f77fd9a0e0d1b7ecdce2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/patroni@sha256:42fee6ab25db19814e96ea77130b68a701e7e2737e4ac1d1211a1754b74253d4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/patroni@sha256:86cf90ea4a442e09413d3b5d8690b06b0d14c0cb40626c43205241466af9b9f3 |