Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.9-debian-fips-dev, 1.30.9-debian13-fips-dev, 1.30.9-fips-dev

Index digest:

sha256:efb16db9e87a80425bf1b99411e9167ef9266dfeff8d0d79c41da2e77792fad7

Manifest digest:

sha256:6e06b62f1b9a8b77f9fc6a8c39c49ffe64a483aec9d66a97b3991e7cd12cdca7

Size

76.13 MB

Last pushed

44 minutes ago

Vulnerabilities

0
0
0
4
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:2f1c23ae3e3205a85b1526ff0ff0b448d1d5569a377bd2be8181f022a11a376b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:1ef4b29b67d5a3f74c62cd490cda6ab998cd5f5cda4a00b7ea5de4ac46c106f6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:fb8eb3f53c628da20a18745c0709594ed0396333fdb757b6a053cf5a0b567f90
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:ba613cea9f98c8cce3649ca78b674f4c111f196010f4f6c86c2586b3230c2d84
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:7c658c4bfd568aaa62b66d22630416a0f6a8844e210336717c8c0860adc08e4c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:3b1d123fe1d0f1caf99aeee647962592a80f9abf294f391e6547d994cef8a004
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:eae6ca5174274b23e9f2a0a097943e3084b03b305e351f868b6a8d28fe786292
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:059bc02c1d6ad29069e7913c9b80e315a0cecf5fcd44476d4237516beb1ace16
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:f5255cf6f78bbb9bdcdb0680104da84b2a94f3e59dec38b7ca0f54826e926bae
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:4c2bae92eb5fc43750832a0e3c4c10565895317339ed2458febf7fcf624f1d2e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:9ea33df92a9195307ff59ecef6f8580606e577fb720970813cddeafe5cd86435
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:1be01d6df0d68e15e47626656e1e87f38ab5c6e7380fcae1aaf5ab8a953f05d8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:5e43c350fb7482c51ac77fd7b7d153d85ef883b1b4ad339b3268a995871ce6cf
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:fb93624e3dffcb09d4c46bd19097392601210553a11202c7ec9008b87efbdf15
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:9e877b8079fd7623438569ca902c57bb8cf0a29ff133da130aa3cdf99eaf5ed6
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:9e291a36a9d3603a3a64bdd0fe9833f90cd889e48f37346be73d45aca83ae51b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:32d2b40ea09651beb8d53d9bdf0c53bc26223a9baac9cdf903dda4ee58a07825