Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.29.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.29-debian-fips-dev, 1.29-debian13-fips-dev, 1.29-fips-dev, 1.29.7-cli-1.10.1-debian-fips-dev, 1.29.7-cli-1.10.1-debian13-fips-dev, 1.29.7-cli-1.10.1-fips-dev, 1.29.7-debian-fips-dev, 1.29.7-debian13-fips-dev, 1.29.7-fips-dev

Index digest:

sha256:41dd38202f7d668f3ed80a3e02bd042439cbaf3296772aad63a633a6ed2c6f00

Manifest digest:

sha256:1045f1f06a7de3d7446b8e33663e152fe615ec75a54524e88984940d3c2b6f7a

Size

209.84 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
2
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.29-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.29-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:d1e1ebd0a7223d228396251720e07e1bd7c7a80e60cb3a45c12fb764e5802751
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:3a0cbf6bfa4c157dac402257b4ab50a0b8aa7fa0c895524268949eed8de4082f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:d585082283ec06742a378f4256194836b9df06c43cda686e502d9cf14c2fb934
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:8ac2a8cd95d4c7b55e07208ec307c56802cd11a64b2ddb9641965317391c070b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:43e664e3af6514484054520e74cfb245a28ad73b19f153a5d3d0d9addc4400c0
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:dab4a2c3d64904c2d1ecd2a6a28c192215fe4ec0d091f9c00ee5010d7622a5a9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:5c0c233b525d5bd4b5072ea9a769fc1f9a5a7479ce70d6a824795e66c71e66c2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:746a522f04e4239a1cd3bf2d0b3dbd5802b8c938dafec72c5b332db282128f14
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:8396cd7f240edd86b19b9c39ab21a596340d6dd83d9ee55f320acf05643fe0d3
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:ed94ba5f702741f66687924d0ce8ca49a09b25217876a8586b0ffebd2654e9aa
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:cc3b600886415b46375b1b36e890d56f4cd88edb65f557b2824056d101cfd1cd
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:f87ad1ba645ee8b3fb7bd8480f616521c5845122e92f33eeb56c79b01eb9120f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:450fa4f7cd85c5ea10abe43dd3e5d72b9878a2169f8f33ced248ee4be25cb7ab
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:73f26adab9e0590db1cf94808c83ba69af21ed8ed0f302011fe759d62fed667a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:d0b13d61723382fc0889c175a012a5b47429913493541b69c22643cf6552aed5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:bc785b378052675d5a44e9c9197f0c3ac829dbe3ee343a2e0e044b3751887258
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:a86a68b71f010afc956db8e724042bf7ec1fd0b26865c81a7f2e59378dfa0f6c