dhi.io/temporalio-server
1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.32-alpine-fips-dev, 1.32-alpine3.24-fips-dev, 1.32.2-alpine-fips-dev, 1.32.2-alpine3.24-fips-dev
sha256:1720a50169996a8f80b32bb9227f7ea3b6f15fc955b4d017aa014b27edef66c2
Manifest digest:sha256:b68cc7784e268c226d823e2d4f6ddbeae87abc48e6e75c16d45fcc79add41736
Size
65.96 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:f4adcfb4477257de1dd43af91eecb2a4a41f040a2fbdc41c8b6b1a4a5c38bf7d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:f3c4171e20d5239468b66c1bdc67cea0548bb2dc40912af4eaf66b55bc30260b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:5b5c49206d2e31fcad176f7e1e1ce54b26308082afd5844a398f47b6696fd3dc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:00cf3f7dd97ae65bb3b638816e15303fc6716a2027bc09ffbf7b6f67438d3ef5 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:3646ef3799ea4823562a0acaed3b93786bb31b08f3a55c723b73850e4afab3c6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:177e38453c200440a2cd4d9a1fdf913e2905f30e16556c24758377586c42f7b6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:6f4c277f6425a5da4ca73b76454acfe8ea30fae6330a212538acb549512e376a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:d93989f1d10e952377279e8c6b037daf09d3a1c4aa3017ced10af00db23d447d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:81b528a0cd7ddef74aef1c3529e16d4d107590543d038ffb81e814bedd6e6a70 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:f1e90a93591faff0509b1114f88443152ca00f349c29f77a51700963791b9a8b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:378969296573b6d113001e6c878830f0995c3a406f95f4b29085438c52126c79 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:926550f5379b3fd5f50442549bd568524c1ac13de5e50e097c79de0e6cbf9a73 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:85c503af601ed8b1cba7421df2df415c474f9f2fcff7f6f9cdd911d217dbe535 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:22a37f38299b1eeec5f3931e65079a198cafe37774df51aeca11d86afa8d9834 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:f21addfde6fd8ee128a57c3466e3784f9a1cb7a6a82cf00b5f0b2324a8ef080c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:9ec996894105a7ab9e8b47a68edcaa809327f01000782e740d8e7ffdb98084eb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:a4fd24741d8499922caf46622d97b36728b24cdc14c4bdb4c7fc717e49396cff |