Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.28.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.28-debian-fips, 1.28-debian13-fips, 1.28-fips, 1.28.4-cli-1.10.1-debian-fips, 1.28.4-cli-1.10.1-debian13-fips, 1.28.4-cli-1.10.1-fips, 1.28.4-debian-fips, 1.28.4-debian13-fips, 1.28.4-fips

Index digest:

sha256:942f7f2c442af76a6290fa49d4ea3a92e775db6861983e4a8517d4bda0f11774

Manifest digest:

sha256:4ff6468e3b5d895dcc5f39199c895a3417ee22661cc99a2d1ebaa6e9022b5a4b

Size

113.87 MB

Last pushed

39 minutes ago

Vulnerabilities

0
0
2
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.28-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.28-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:e7400a0886f29de873da924704dad56465b7ba3e444acc741f0936e1d45caa09
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:a2277b24866318b06abb53c81cc6e3c437068a399ad7ace1ebe4094776df9a20
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:3b8cddd96cb033276dc7b4b01ecd751f0ff1a97fdb99eff4ac18a583876a254e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:62b8787b8dc7ea9a240197a5338608890de0e2aef83e6ae139dac0f902b0cbc1
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:314c718e6c3def004eeb1900a0ff3544da8cccbd57b8db356ef323698454c762
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:c4eccaa103be13a125936b38add90f9661fd904dbe3b77616c3f370c52e66ac5
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:e161e057a6bdc3e000be7365f4542a6100e2ad09ce7b167486dcc65be7672721
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:2bf0600d0c0ae1d1b6b095045ae39a3851c7afec6bd04fc286610c4021200851
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:a98f188a3098ff3f4a4f28a73b05d05f67ca07f9c65a55381d990a13b44ba8ca
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:d879f0b7d3cbe8cf7704aacc5eba9766eb410f788ad40ee5ee67c2b7d667053e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:10e1e75a03f7f1b550745e027c68a7bd54429e61806ff9c1a447980f422cbff6
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:bc145e0fc0d2f1ed33be0471929907b7119f29774175947db3275f710650cb3a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:c68935fe8b6d691e945e9ca7e751c66fd535ac20da2011247250f14263931771
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:9df087fcacff1d8ee90a3b2186e50bce5a293f9c53449a32e25256323d27f538
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:a804c5c591db502b3f375f0c9aceece0ed884a2954259ba19271f31696816f98
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:1d6ebf5bfe257b8d6d3ddd6b553b340a37bbf60ad994825ebdb1035f352ac8d7
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:f1356cf6821c9147e389deed1b846f368daccf25b60ae524fc985df8b89a85cb