Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.9-debian-fips-dev, 1.30.9-debian13-fips-dev, 1.30.9-fips-dev

Index digest:

sha256:214c38c835dcd6d6d5d613c3dad014cb89174a2e80d0a1de46440167ba81081d

Manifest digest:

sha256:d2a6e6caff8d52b241dc0c1841bf2cdc5e37e96195148864cae4b622e49f3d97

Size

76.13 MB

Last pushed

10 hours ago

Vulnerabilities

0
0
0
6
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:006b78e3dc6a0a266501dad75bd54c1ca5a3c371bd9a47bab2e086392f273d80
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:a7febba4121e003162de4593f26944ba12e2445ffbc2d462e27eae5ae618a879
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:a3ce3649eb3b711a45dbd74fe88f703efc377ed639d7c79b3d7f69abd69d3d1a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:58d6800e696fc44d19249763577431aa2f09ed319c2935d45bc73ff3fe7e5aa4
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:c6efafd4f76b87ced9b5b0a96b3da3770ccbf06c3ec9adabed5b90f32dd981d9
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:f90e310d07feba684734e2bd55aabce3b15df8d8dd38a01ff02bb2971d30a3d2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:3f321997823e39f62adabed28642c8f81200c4aa6c444f655435c861006e9ac5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:b1c0d38856a7e29a66a19aaa5e2eb358bb4612d5c4e4d9211809d1b480c58672
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:bbcba0c33e9148d07c685f472b98bae1ac0309b278969068d8ea7674095ca6eb
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:fd7dd14b76253ce415ad74182393ff890a165f5b2e8ce80bd4bb144d9624d3d1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:dcfeef917b00a8115381dfc5bfcc009c6202ab60bfc8f1b45c8f2d8864d3a4be
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:e3b9e8b32ced966de74a995ef3ef206ca464f40ea2740578600dd55b7c028f17
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:e4fe931ec2da262c38003226de6ef5fd82ef1b4d53b1c1a97d6679ebf2b60399
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:d58b7cc5608c3d00dd79dcd01874497639a68d906b20d3791fd9b3611520c977
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:9624d562fef527e9aee2566b8db04db54e980f074dd8b8597a9a24e8bb192762
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:de6c642efb2b5c5a866b46813b9f180b7dac41fede6137232134ffbdae4fc83f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:7c9a5773b87ddd3da9730ad225bad253eb8cd690898c9a843177c3346a0a8cb8