dhi.io/temporalio-server
1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.32-alpine-fips-dev, 1.32-alpine3.24-fips-dev, 1.32.2-alpine-fips-dev, 1.32.2-alpine3.24-fips-dev
sha256:345f961d98c003d06b9a2172731e4288220e120639a732a655d4f8c5316c59ef
Manifest digest:sha256:6709b8f755cc781e3d07fc5e2663d9ba3ef2076343dcd9bea7226c161b2b1183
Size
65.99 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:4894ebf35a5c0d677a9ab95af07aab48f86945bfaf25a2c178b4d2fda7bf8b94 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:dfd7377fdb5320f523b8d2d9fa6a23c8c5052a6c299a629e2b493506031b9de6 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:914c300d1ea95a086e5682c997a1e2bde2e1488dfb85c5daeda8b4022a9d50a0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:dea611e7e5d961c584dc01b24cd903948fa072909b1ea1b97ec0c22778ecf2c2 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:7d7f61e79b0ad7d8d0eaca82b9fff35058685df77c5a324d17e0e748a5b9d0e9 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:aefa7bafa9de3b826cf7c848c071a4f3450c3e47c21f289ef2aec86890e5f68e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:3169e5905db3ec1748e87de740c5ca31c98080cea19908658971f8b535aa6523 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:41552727555f3bb0e126ce3c73347ae6698379b6db5465f1f702ba1e9b34c0a0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:5ecdfdc8c20cad7a15cb0cf4ae32fa1dba1000d291d1f957724373b64fb955a6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:3981f034b58d65450c81d6b60676bfd276480bcb2c6f823383f96cc43e2c6542 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:705a259d35d0b94f9dcb4d5d409f4625097a963c1c1b537be8f61750af485348 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:8ad2f77afbf4c4f51341bdd09450e1c1d4f9000f488cfba3d195c98d7b4e915d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:1ac3dd734def86b9f637f9efe7bd19a055b9fa7b33e3de514d83f884694b6612 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:d413b3b0e3308c6c0127f49b52b28d4433cc823b0b122b321354f314d9d9ae4c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:981b81081d99c5758c736c11ba6068b4167069d2a86daece7ec5c53b18841388 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:c3f65147e9954fec4b2bb528bdc1f1d28899d29f8b42b9c2afc6adb1d848fe54 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:a36d072852ec948c72883c6cb2f0a5d1f48845f8407046df35b3fe9028faf5e2 |