Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.8-debian-fips-dev, 1.30.8-debian13-fips-dev, 1.30.8-fips-dev

Index digest:

sha256:feced4599598bf0776c259b86dd3acabb6f2fde14599235e95432bcf1ce5fcf3

Manifest digest:

sha256:17c1cd334d6ef8279bb381450ab56edebc9d907f7549de09ed15bd644fd3e156

Size

76.11 MB

Last pushed

20 hours ago

Vulnerabilities

0
3
2
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:71ceb5be5561e6e1ee577a1cbc90507f645e1572a51af7a7cfdd9890d107358c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:e907b1d160c6d8cc4b5eb46638b97550397764240edf33af7da7a598bc47845e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:d8512cd504348fc138f7d6cfde53f249c8e7be6747dd474719960805ea6ac7d3
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:c53b773a2cb6bd4dec80abfc7fc48d6dcdbb22f0a6fe2daccad5511665dbe12f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:3d311e9cb0c14b8a298fccf7ad9852dcfe94f5333207a271f6c8c597669c46a1
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:1c07b2260b693dd93794713f4c1fad4a397b9b76f5f8c991556dfcfd59f8324c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:970458185ace376cd6bf6fe9343154547efd03fb73a935b11037d9ce7eefa79b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:fb634b00d5ea689300c76723d079abfe70083539503ca5561179b730874a9e5d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:e0eb7bd95be9d06fb0fca261f9b1a2acf3c3fa2dc216df5b9384dfe6ddea4acc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:86e14b9c5eb894eef0da8caa53fef78413b201bf07f1534a34b47ed455133931
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:f2c1c85d438c3e21da65059f35171498d35767de0dec25c3bdfe4935d8116c4f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:cbcbe42dc746c2985e3f1c84ff26f39eb3cb918e44c188655a252cd0d7cec8e3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:f33f5edf0305454c5a8085490f1d2a651ef0b568b03c037d1ade5be67e1c1250
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:9bbbb4b1603e7d86caca99be82f9fca6e3848e9d2d4301a798255bdc19056d64
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:45441887e9620b4481534aa26854a255c55547146a3be0f672ac4ac4e24cb466
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:53fa175d49c5452f1c710eb80a2764d53c0cb05f4f6e3f6119fbb36cb6c670c4
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:c3ba77f5bc6db1329c000a7f5f27648da8d4bfe2e96f3646bd86dc156ed4410d