dhi.io/temporalio-server
1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.9-debian-fips-dev, 1.30.9-debian13-fips-dev, 1.30.9-fips-dev
sha256:214c38c835dcd6d6d5d613c3dad014cb89174a2e80d0a1de46440167ba81081d
Manifest digest:sha256:d2a6e6caff8d52b241dc0c1841bf2cdc5e37e96195148864cae4b622e49f3d97
Size
76.13 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:006b78e3dc6a0a266501dad75bd54c1ca5a3c371bd9a47bab2e086392f273d80 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:a7febba4121e003162de4593f26944ba12e2445ffbc2d462e27eae5ae618a879 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:a3ce3649eb3b711a45dbd74fe88f703efc377ed639d7c79b3d7f69abd69d3d1a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:58d6800e696fc44d19249763577431aa2f09ed319c2935d45bc73ff3fe7e5aa4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:c6efafd4f76b87ced9b5b0a96b3da3770ccbf06c3ec9adabed5b90f32dd981d9 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:f90e310d07feba684734e2bd55aabce3b15df8d8dd38a01ff02bb2971d30a3d2 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:2488ce7ee8a1c9a3cb4479c6a4fda435298c7a2a23e5ef3857695b36e905a07b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:b1c0d38856a7e29a66a19aaa5e2eb358bb4612d5c4e4d9211809d1b480c58672 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:bbcba0c33e9148d07c685f472b98bae1ac0309b278969068d8ea7674095ca6eb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:fd7dd14b76253ce415ad74182393ff890a165f5b2e8ce80bd4bb144d9624d3d1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:dcfeef917b00a8115381dfc5bfcc009c6202ab60bfc8f1b45c8f2d8864d3a4be |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:e3b9e8b32ced966de74a995ef3ef206ca464f40ea2740578600dd55b7c028f17 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:e4fe931ec2da262c38003226de6ef5fd82ef1b4d53b1c1a97d6679ebf2b60399 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:d58b7cc5608c3d00dd79dcd01874497639a68d906b20d3791fd9b3611520c977 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:9624d562fef527e9aee2566b8db04db54e980f074dd8b8597a9a24e8bb192762 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:de6c642efb2b5c5a866b46813b9f180b7dac41fede6137232134ffbdae4fc83f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:7c9a5773b87ddd3da9730ad225bad253eb8cd690898c9a843177c3346a0a8cb8 |