dhi.io/temporalio-server
1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.32-alpine-fips-dev, 1.32-alpine3.24-fips-dev, 1.32.2-alpine-fips-dev, 1.32.2-alpine3.24-fips-dev
sha256:9d6e5f7a486677b4131c708d5c51dca41bb27795d75c20d9409391886afd2dc5
Manifest digest:sha256:19288067e5803e479d25800bea1599ec0c8f6f4d1f47da638f2c6e8049993fba
Size
65.96 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:84bc38fb7fb7bece8162171d036a554742c9b0dbcf2929bdb22c494cae3a24bf |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:1e781f2bfb3d0d065e04ca90bffb1b35d911528a316c9715fea86db5bc089224 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:bc608c530945fef1203b8654d083285e2d822e9af3559da8e690b745c18381fd |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:824e6f6bccc5970385fa8111b714cd5a91bd91778691a467a428ad23d4bf526c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:bfabe8be31ef2e3ee9ee3f0ffd90f0a89fdd21e6ce35b39fddeac76c254a91a7 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:9a5a38955b8dfb033332334dbb1e716e8ebf43786d99c94617773d335f6e9201 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:ac2b0514f6d6c373eddd30de25cefaa551e88150da5f3ffde9078911ead2c2e2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:57027ce66a6cc1e215d16228f3dda271165b0a5fda03d81f30d6141a69609299 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:a08aca56d5d2ee69b1b8d16196f55f63965779cac8135bdd6d5b2de342e4ef85 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:b62017a9afdada2a4b848db26d36316bad488df7e3817a9167c5e85dc9790da4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:e90273fc22da42218dff10d395ef2a5e8fda3b281cdbb708543a0fa6b941bb5b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:c96234e04eab301fe0ff8123c73386dfa39088dc0147f73242d92cd1840926d2 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:6dd219710468ff8a899937788da9a9cbc88a68260e7e890f9272c32bd533f536 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:a8dd88b636b5d0308c32acdb849180be0ae0651ab048b843a827de018006e98f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:4d5b23062e75c71b3977a825733d2533cf2ddb332d65e746c927fe8ca05274c4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:00d9168c7991d6e28103f38e95c57aee4a78d1f701d2c4051ba4303e5a54aace |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:a84ab042be4d6d70921ad6e60a9890e9df02555594d3754c7e689ef6e9b238db |