Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.5-debian-fips-dev, 1.31.5-debian13-fips-dev, 1.31.5-fips-dev

Index digest:

sha256:5dc57995167a6139027a10ce2c4b166934549cd6cb1590a22074f803edd36471

Manifest digest:

sha256:221023ef8ead4a39067b2220c70525ed86f25afa08bfe8505b5c2b5ab5f12b09

Size

79.81 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
0
6
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:1f92be3769dd7e0e7243ad94cd8be844db33dbb2579dadff16e2257eab0f1baf
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:73ab088fb14ffc5405665ead080ee6884e88fdac0468d4cb4a9b015abeb8cf07
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:b5cd0329bf3fa6ca4838409e3a3052a0cfc7883ed8b5c02b82d84c5d23f2ab00
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:b0962a24d7ff5544336c1036f70fe2d916b217df4f849f99d4b9b9f26f9c93d3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:be1943a2f4630310a15a258e530b5abd056fdeb7c76685c178464ab187307a60
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:b10a763ee0949b1900a8609118e757e1056fcc31bb97f2d8255831e43fd144e9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:83bf1269c49cab680c04e3ded6b0e2a11274f36630e68fadaf696b443b238b38
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:1c2e80b8e24772e7edf179f57003d6c67966a46bcbec80cb11512481953bdf97
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:4a1b57d8a499d3068dfdeb4c7b155fa7d87a8a9de6911dc3a682fdc4a310b7cb
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:9ae361e36ebd6a10603f8fa76e8fa7716d947d997c057c201085f03c495ca8d6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:59f22311e20f9a247b87e06112ec18a25e357550d87b0dcc5f3a31ac6850aa17
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:0ced2de2863b744bcbfe58f1d4920fba2e2af84e6d4b38030595f39296c01c95
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:bff5ab66dacdef11a5bac7a9dba4220641511a12df444731d311388c1681ed8a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:f079f6e1a0e85a8809fa0190d0c2e5d8fb79e20a088bb7628b08586657c7fc89
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:d3829606aa51c8cbd06b49730779b22e659a21696a416225048b1e54847d1532
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:373799f2abe44256cdd155eb7f1651f34b1e1c5e7fe68636e82911fb6a99685a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:3dc833ec259969bbceaa288b7ee6cfe7b174482352b72804367d1f88f700be81