Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.29.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.29-debian-fips, 1.29-debian13-fips, 1.29-fips, 1.29.7-cli-1.10.1-debian-fips, 1.29.7-cli-1.10.1-debian13-fips, 1.29.7-cli-1.10.1-fips, 1.29.7-debian-fips, 1.29.7-debian13-fips, 1.29.7-fips

Index digest:

sha256:ebccc324368ee3060bb734122413bc1c96afbd04c561b746ce5b6da4e603d901

Manifest digest:

sha256:29f376700bc85d2fe0b2a73f9c0a9bd8f138c3dd9d8dabc39a049b7541eaf099

Size

114.46 MB

Last pushed

18 minutes ago

Vulnerabilities

0
0
2
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.29-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.29-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:6db5135897a6cda3680626f68a10d9c9d6e12efe5f1a272fb26bbfb95ad27ab2
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:d6f6c4fdff7a5d75dd9e1aac54fdfde99e40a377a289e0f23f4da570550cc4b0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:c7f0c1cf24aba5019a216a68083304da1dc5d4f0a1bc81dc569e6e2cf398d23a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:fbd9b7d8c6ff049d390645b791fe9c27b8ca55553a7c26965f3260d5b6755775
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:eed355cf03137894d28eba6fbe8ae39242ff8d6cf53995bb4605530498b82615
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:01414c38392bec53dc9a7dde512022c4066f0254948be2edb533468660b06b99
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:f8342e4d19fb529b2c7723e6fde0d35dca47f2943f2885d77c9eb3b496667995
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:37a90c3794c3ee373f09f5d5dae7ce7d5a62639fe450877f65cb898fd2bbcd93
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:940f73d08c72ba9d6a503bfe34f652d8a4878d2adb9f24fc0f6d621a656c632a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:d052dbde153a75e0bdc0df07590038fb682a68aa7e461651ba01564c3b75ce1b
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:c87d04cc640b42fb8a03f7da7d6f819a6b64bc3b17de15875183ede23dd23294
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:72811eaf343c73b4c1724552d6c5ce92685b28e0923aa667440a008c1167f240
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:022eb1bc6a214e7a086ddc006910864a8416db47816ec79c1ae17bdde7b3ce45
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:35b12f404f306f57ae04ab6cc8d83dd76532b63144f82f5c1d0d402b9a86f7a2
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:622d732270c834598a74e9058294cb6bbb63669ce8069bc9691adf0879e14cf3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:53723f22352ab622111e6f0b9985c5681062ca04444878701578314c80346f5b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:be3d88e65e8e8289a9ca4fe7a642d1beb6abbb957c36c68bb8a47ed7e09998aa