Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.5-debian-fips-dev, 1.31.5-debian13-fips-dev, 1.31.5-fips-dev

Index digest:

sha256:51ef51a5181020a19c4dc9e9bac31a536700c3787f985008ee87b98ea979224e

Manifest digest:

sha256:5b4a242c3d3b1d6c77c19260fa264fba007866dce9a98d2aaa41b481fb7d5459

Size

79.81 MB

Last pushed

43 minutes ago

Vulnerabilities

0
0
0
4
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:bc6da62005fc79b60844731ff74d792ca7f85c7db7097fefc2d10f75b1b5c86b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:8f3deb49d8ab214890a8cd9174b668917ddbe3c8c8e1620252b1345ecdebaddf
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:39a770677f10d8f20391d90b6b83dbb0db30a5ab80720908c156135009dfbb46
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:9fdabbda5162ced6455a3a3de253975f121102c3f23ee09f740c024b0d149a4d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:28c2ff31ce39aadd85b982171fab0798903a48abebd062d3bb66f288307cd2be
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:7da63425e6058c859da4ae15577436647f84891e0b9fba17852d406a3eea4fcf
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:2756c0ea3cadc75e00fe5279a41a66b5f04b038be4c9247805e6b10b5f26eb2b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:7c517f8023b62ce57dd947d5ae61dc5c251479d6f8bddab120796edc85d72902
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:841d4e5bfd8ce49583fa77de76de72b05de6611fd3bf7144fe8ccf53deae0b89
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:6aec2bd56b22dc9d55f9599bf4d28143411297c63bb33284996c7030c07b46fe
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:aa906f58feb6a6dc6cf93a25bff9dfb23754aa6de5e99202def537989c36538a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:ddd03177ae34f3bbee664f905e6281758a366e386c5b31dee3c588d921193f88
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:ea1826918259af7773945b090f7ffbb16fdcc34bfcfad990d325ca93e78cbc59
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:9d959a0fdaddf2a1a1617c3154d792cf331d4b33b057b1c3edb58462d92b22f0
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:f22c28a361355e876a5ef44ce9ac2a2fdaacdb4ded3e6b3fbcd6d2a2522219d5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:e397bbda68634f90eb60d087eaf5edc142c7566f928465457db9ca089c25234a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:5b6883ab4d924f70a153b989056d2af3052178c59e926dabbc521bd62f002f17