REGEXVAULTv2.0
Dev & Systems/Docker
Verified Safe

Docker Image Digest (SHA256) Regex for PHP

/^sha256:[a-fA-F0-9]{64}$/

What this pattern does

This page provides a lightweight, single-purpose regular expression for matching docker image digest (sha256), ported and verified for PHP. A rigorously tested regex reduces debugging time and protects your application from edge-case failures. The snippet below is ready to drop into your PHP project — whether you're validating in a Laravel validator, a WordPress plugin, or a standalone PHP script.

Php Implementation

Php
<?php
// Docker Image Digest (SHA256)
// ReDoS-safe | RegexVault — Dev & Systems > Docker

define('DOCKER_IMAGE_DIGEST_SHA256_PATTERN', '/^sha256:[a-fA-F0-9]{64}$/');

function validate_docker_image_digest_sha256(string $input): bool {
    return (bool) preg_match(DOCKER_IMAGE_DIGEST_SHA256_PATTERN, $input);
}

// Example
var_dump(validate_docker_image_digest_sha256("sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4")); // bool(true)

Test Cases

Matches (Valid)
Rejects (Invalid)
sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4sha256:abc123
sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855md5:abc123
sha256:0000000000000000000000000000000000000000000000000000000000000000sha256:
abc123def456abc123def456abc123def456abc123def456abc123def456abc1234

When to use this pattern

This pattern is drawn from the Dev & Systems > Docker category and carries a ReDoS-safe certification. That matters for PHP developers because especially relevant in PHP where PCRE backtracking limits can trigger silent failures on malicious input. RegexVault audits patterns against known backtracking attack vectors, ensuring you have the necessary context before using this regex in a high-stakes production environment.

Common Pitfalls

Digest pinning is permanent unless the registry garbage-collects the layer. A tag can point to a different digest after a push; a digest reference is permanently stable.

Technical Notes

64 hex characters = 256 bits = SHA-256 output. The sha256: prefix is mandatory for algorithm agility. Digest pinning provides immutable image references.

Have a pattern that belongs in the vault?

Submit it for review — community-verified patterns get credited to your GitHub handle. Free submissions join the queue. Priority review available for $15.

Submit a Pattern