Sign inSign up
Patroni

dhi.io/patroni

Patroni 4.x (pg18)

CIS
linux/amd64
debian 13
Tags:

4-debian-pg18, 4-debian13-pg18, 4-pg18, 4.1-debian-pg18, 4.1-debian13-pg18, 4.1-pg18, 4.1.5-debian-pg18, 4.1.5-debian13-pg18, 4.1.5-pg18

Index digest:

sha256:e6659f454ea7666f73c922c4e3d7c1bdcd0902acaf60ac9919bd3be35ae0ab93

Manifest digest:

sha256:3e9e507818b6ca588713464184b0aa43e5b1e7166f5c1ef26a0e70151ef1b2ec

Size

167.45 MB

Last pushed

2 hours ago

Vulnerabilities

1
7
7
14
3

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/patroni:4-debian-pg18

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/patroni:4-debian-pg18 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/patroni@sha256:c22efd237d68c9a9b0c5adc2e0823794960f225d2f167cd3ec5a53f879d2d64b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/patroni@sha256:3a20d60286915b73d4bc642b4112447811a78f21194b9de2bf14db122eb9bfbe
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/patroni@sha256:b66071c305b94e60dc5363b647ee8b11f0f817170f07182cb35662c5b41107f8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/patroni@sha256:054e364eea26bc1c67e9dacde3464c15cfc40593bce7055dab5fa5ea590e2a37
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/patroni@sha256:a24d3aad7b3df75d2e7426aae34b908ae3da19c760ee284e520b89fe154e00bc
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/patroni@sha256:d33054e83e18ff9ac0f5d796efd1d8852854bca23a1a3b8b2597607dfa6b98d1
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/patroni@sha256:59a7395e74aded8e571c46767490fe8a81969194bd2eeeb261f88e175fec27ad
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/patroni@sha256:89171c7c6cd91e0535f37e7ba867d2a5c52257321497cfc82fd1972c54a3209a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/patroni@sha256:b73ec5cb62c1b74aa12fccc3ab0fb0826126b92f53273a81b602b0f8aa3103ff
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/patroni@sha256:9571fe82951b4fc2113a2eb15a6684d574fa450fd7d790029391069470d98ea8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/patroni@sha256:8512619a66707fe167f241a8b03e7c436eed66666c1813f9719de4ecc9987d3d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/patroni@sha256:1ba93e820cd442c1e04682819e4f9bcee4852d2ebf5a3019529338a8d01694ff
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/patroni@sha256:c0d2dbf6094d672d8e79099052390b868a23b2798cf36e18a71719ae34cae993
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/patroni@sha256:b714b9084c7ba3aaf2853ff847a49a9595323d25a43490a1ebfd446090632641
SPDX SBOMhttps://spdx.dev/Documentdhi.io/patroni@sha256:b854592c9b60fbf074e89a2635fe1456f7df8aca24624044f22dd730564ee7e1