dhi.io/temporalio-server
1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.9-debian-fips, 1.30.9-debian13-fips, 1.30.9-fips
sha256:54543b31d97b07bc8f248c2f3230361a8a2f60f2cec1186a8976899bd126383c
Manifest digest:sha256:d4c782d587f090b6d01f5306841c9e20544b516c0fec6da520f439d988d9e699
Size
40.24 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.30-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:873c1678af4c46e27bd7af51b2204f681f918eb3ce9068f75c24f9ca7d2de0dd |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:3f95c1ab1843a16e770f9609ea3f2986ca1a092809b7cb6368b140ffd1c9e22b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:bffc3fc6ff5010d5f1c794f677977ea2b1bd24ed9e999d35cdeb75809b9b3c18 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:0f35eb1218d32e6174cfb88bb6882a43c0c07b2be5b62ff891adae46c45b8b54 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:d772402bfecce3d933584a682dc1cdc4220b48f34275bb61ec5aeee13f8c353d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:44d7ecf0d35d64867ac31bc4795f13d2d830a4c306fee85b20ef2e8fa9a00f39 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:62cf1460cae685cd1d5a9c738a496262de351fb8870531592f348c9b1d514ab3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:5a542a92c0b9ed6b2321a046510df60fd904c8b6d4ea05b6f2d36e5608860a65 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:e8202dff4a30421d5dc592287181835771bc516cadfd216fa745d5f6a13eca21 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:dfa908c76f15c1688fed4211ae7a194a5cbe5e4c6a95c449ee541a6365c24fd4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:6d6e0c4bdb2a264f1a3026658e999cf62ec8a7f1ed472d00d682e7495b0e068c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:d81bc71a6e2f4793e6b8ecfec1acb0eb23bcbfa04694219b648a3fb939caaa3a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:a8bced3a444214dbb2de1af985dbada8ff8ea129decf099c60c7a6986ac3e212 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:2a2a07b8bb3e3e2bcc69ccf4c33f6c7635da05e1f86b234c2088c8f128cb8b3a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:964794b991556219a9cc9fe66c02b865941dce95e75dfeb174fdeb247cafe41f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:d0766659b55d4ef6ad7a49ed727c66cdd2a5a846714246fd2b4aae9c3cf7bbe0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:919ffbe7967a67f80dba0c9c7928befde0327472e157428433121cc4fc101090 |