dhi.io/postgres-exporter
0-debian-fips, 0-debian13-fips, 0-fips, 0.20-debian-fips, 0.20-debian13-fips, 0.20-fips, 0.20.1-debian-fips, 0.20.1-debian13-fips, 0.20.1-fips
sha256:7cc2092b6841dbdd5b19a4578c6834c9aa24b83225a7f40719d83121219b2720
Manifest digest:sha256:a2d9561aa99c509b1c48b6fe7b1d810094b7950fe8b53c2f9137c8cc9b6fe61e
Size
13.71 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/postgres-exporter:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/postgres-exporter:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/postgres-exporter@sha256:b5a2c7490ad2064ad282a2e12fa0d66ee84656b509ba1809d9e03faee56f24b2 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/postgres-exporter@sha256:fbc2c4301293dadd35a7a5d1f6603941dd4a740d8ca1ec5c5a13d86481bcdd29 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/postgres-exporter@sha256:d5525a78d81992e363255cde434053396c849526243fbd2f5fbe483be8397f26 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/postgres-exporter@sha256:bb5d2af0c6c0981910c09abf58bc5404bc485c1a466f591a2e8c22de04806ca1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/postgres-exporter@sha256:b019abf671646a7e93e5733cfc10af29bc84f6482e3e3cc6f1858a5562f2a6e3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/postgres-exporter@sha256:c6fe52473754bd23926ba3915f4c1e558b61c51f871273b4cf354acce90e3ddf |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/postgres-exporter@sha256:b2bfee55c3848ca9db582e0ca7cc10c3829734c532c6ea796e5988574ae03a7c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/postgres-exporter@sha256:1f6e073700001ce83d6d1697b21621ca637fc95423d7560f43aee70baeb0f5ed |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/postgres-exporter@sha256:b8a609c1e63588622b865603fc4158bdf04f46db8793e2d74109805454c380b0 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/postgres-exporter@sha256:ebd05b98b693e63e5705d965e2bb9f79d9d1e4d931807d0a9af4e5efcd28ca85 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/postgres-exporter@sha256:802c8847dabcfa71f3229c42f3035c8d2f6744be7e6875404fa56787bcf88123 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/postgres-exporter@sha256:cc8444f0a6cc6c870f92f321afda3f82359654c56122e40b02b41904ef3d7988 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/postgres-exporter@sha256:00a3e269e132cb3c82de464b3dc7964ca1a2667541ecddac5822102435eb9f36 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/postgres-exporter@sha256:29e70cbe740a490c2fb3eee8f3f88ee645c72ca67de9f1bd11bd998ad64ad661 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/postgres-exporter@sha256:5a996b03484b213bb7abeb7c6985f6be589cf15877450b4796226ca57c34c688 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/postgres-exporter@sha256:2018944eeb123fd29234c01bd4581409b1b7bde38b01db22cbe0050f2a3391e6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/postgres-exporter@sha256:5838971889b97bb7005bc313d7be11c3d160b84dc37c400c81df4a1434b30379 |