Sign inSign up
Supabase Studio

dhi.io/supabase-studio

Supabase Studio 2026.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2026-debian-fips-dev, 2026-debian13-fips-dev, 2026-fips-dev, 2026.09-debian-fips-dev, 2026.09-debian13-fips-dev, 2026.09-fips-dev, 2026.09.07-debian-fips-dev, 2026.09.07-debian13-fips-dev, 2026.09.07-fips-dev

Index digest:

sha256:a880174a780158c30497fb0a30da7d21aded5b5cb63ab7317423d483f21bb1ae

Manifest digest:

sha256:d999ac379c6bc57c0dce17374d15e9a7c073efa9e297e3ef7418d0140a8a95b6

Size

105.68 MB

Last pushed

2 days ago

Vulnerabilities

1
2
2
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/supabase-studio:2026-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/supabase-studio:2026-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/supabase-studio@sha256:816b89e5c217a77c7812211e26bcce07897c930ef5d7939305d8e76261d9de53
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/supabase-studio@sha256:5ce208966992d8b65efed156a2a79f9c7d71ff48bfc96b9041ea2e4b905f5a72
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/supabase-studio@sha256:9ab577deb9ba097ab479653881a0d9ca5ce39dd763277cd746367d90977ab0d1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/supabase-studio@sha256:e3958439c5d6999603adea4b9d9d1aec0b1903cc0b46bd254f57e9f400772be0
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/supabase-studio@sha256:7574e76d419858c215daa75b7bfdc0b4ebf8e61d2b97289ddba1e74f80141338
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/supabase-studio@sha256:15d5d928957bed58849df9f2b5c4a11bebab0a76ba9c9e675687c12176a67f5e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/supabase-studio@sha256:b298c80697cde099c6dfadf4638d9fc88d5e5eb1ec4e7d53943f56f54c26feb2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/supabase-studio@sha256:105411cbb95aa8cbbc45a04bd195b1f94a379dec1039f7437e96507287ef39b3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/supabase-studio@sha256:2271b0f1f694077d5ca0d19b1baddce50a3c4d439d0c13a022b10a3bcc8cf1d7
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/supabase-studio@sha256:8cd97246fcc7927b8bdb78140a026a82967b2a514c18c641ec7c640a92192e23
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/supabase-studio@sha256:4f3a5db41d0dcc76bd9dd56a7b0825368b9d5f20bcd39635c4b4faad99f69b46
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/supabase-studio@sha256:e51344ae35c077463a3cc147a3092690ccfe78a28cc5703dd179435666247fb3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/supabase-studio@sha256:67b677171aab6f9fd720c001fb834086a9d8e8386398a020aa674cccd4b78504
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/supabase-studio@sha256:2eec81a7b4eec6f7ecd8c0c6d08d2856f555f886c69479265006a14b78f8d63d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/supabase-studio@sha256:bdb48c73008615b5664d20e31bcca34cfa1e49807e57bd24eb575b0ca785e886
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/supabase-studio@sha256:1a368540cd1dbf4d2e6dcef2c7fe635874b8ee1a5f6ec5834b502b03a1035c21
SPDX SBOMhttps://spdx.dev/Documentdhi.io/supabase-studio@sha256:1c7024990b9b5c784b55eea1cde17f548a0077ab594bf0f640185d8376d4fc2c