Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.9-debian-fips-dev, 1.30.9-debian13-fips-dev, 1.30.9-fips-dev

Index digest:

sha256:4bdfbc7910d885dc2add71b34842f1711995c09cf1457bd109d85b47ec09ef81

Manifest digest:

sha256:cc75ddf70a57e4e6b8ee4dc682367a6412d462dc26811bf0cfd6cea139b8eb75

Size

76.11 MB

Last pushed

12 hours ago

Vulnerabilities

0
1
0
9
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:7fdc89cdab166edbd9e6421bbd49b4215abebec636f8c2111d6fdf01327c2158
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:911d0c342c6b4687676d60e57e463d5fb1f09195376f60c6c895ac38197990a1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:11708d0b5afedc2bf2c95b1adacce31f786ffdbc565a1175383d6537da50820e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:e623414f841108a7b229257784da5d10f30469dc7ad24b122df9fc15f5e5242c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:5403969b0d527cce842fea84a63fca9e17661729dc35bec874198534b30db630
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:cc710bcf5ba735353f2d639904c0852664c5c9199a408221517e0644cc5f3cbb
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:f656ac6deefa3f5416e1f66f6d05b354a43d0b9c2a57dac4251986569015c4d5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:d518c29e98c429bcf9a1a8186715062b51eb2955a6613fd0d4cbaddf8a34825e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:9fc9e3d8bb4694f30e58b8b9266cb4247107db55b73c339a211c00c1fced648c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:f852eecc9fe64dd4130bc430d07a3a950689aec5dd94442e05a88886d16dbfa7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:0a25e0b0352c00d951821ef1c2476b6b743366bb385545da6553113b833a89e2
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:7d2cee198ce044b87a1aa21870589ae8e7874262764460bd7a6c84646ee945d8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:8f4cae3f15547a4b70a4c9a7665f3a0393fcda4b7dad5d89f5508eb374c5b95f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:568ecbe958d206d15b2524295cf95bd18126a11d38a5b717d59c8d8c52f8175c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:a35975c176f3bd2bf4e2e6990d686ed09848e974e35093424b5dad76e7b5e001
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:da69fbe7a92a2e82e88efdfc5797806ce9e6582f1b79a842d19df4d001d925bf
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:b815da49bb8102944c4ebf99b74387a66f6b2f1ccc880322af28036fa01005ac