Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.5-debian-fips-dev, 1.31.5-debian13-fips-dev, 1.31.5-fips-dev

Index digest:

sha256:0f86af43135aff5db63b0ed4947bff9ee7de4d8701ce710afa42d2504871ee3b

Manifest digest:

sha256:b60664548675d62955dfc88e58ca5fb58750831b406b85d16737f5b46cdb3006

Size

79.81 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
4
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:fbe00543acb99a02d74c4136dc16ff38dbe956ff9fbd3ac2c1a1b22469fa63bc
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:2a7d01efbd4c0268a4e17a9670f74711fb2c3e55a55aa18365b42ac260685af4
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:9974f0ba6e8b56dd3c92245c2de570860788c6ea03c2b8090d7f61378af6cad3
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:51810775609e7866d8cedea513a809761bb9a04f146999a5bf29a08426b6421f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:f771fea68d44a5b122d704bce4c61f4dc376937be230f226ea1f6373f3a0c5bf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:b03656c5673988945eec3d226fb5c2a36192cdaf88e705e0688acb6b3e5a28c6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:0ac139996ca417253bb7a73e7072041e4ad77f026ace693ca24cf8718f41355a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:7d81b568391219eab53b4c291accb2d74eead8ba6a4e41c37173909f3ee267ac
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:e9d0abed8619a65516a176812a3c9c8c2d5bf903b79e22cbc0b65e2db7a44b76
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:4f6197bf85ca250b946b7b94d0f8d6c37d6e6a0b8883cebfdd1beead980cd931
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:0e4c1a35087eae4846fa2c4e27722c64de1a288cfcf996a3fe36faa4aee47e8f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:3f4ee2b9ed7b0bcde29be4686a97b6f68007b69d7c81359183d3ced1fdad5b8f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:275d9c7b6666028c919c708f75586f9e0899e2dff0a1e06e80545b74a889afc8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:a94df3b638fe3e4930fe1c15aef79e9753d3e41bfb1dea76ba3a5dcf51f23966
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:eb862585b5ab1a97be4a45871192d16a1a849e33ccd3f8b4de0f7bae97171692
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:89dd7c46f9dc2e904bbd29431786888ca57e67cb0554af2d04186ac33ad87c7e
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:634b604a78839b55a210f6e7f0156eabe82186fcdfb4af0629c81153e1af2b80