Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.8-debian-fips-dev, 1.30.8-debian13-fips-dev, 1.30.8-fips-dev

Index digest:

sha256:e46c9d2cd65f5a028b64563f719103a41ed4d0f1706e8a90bdd7a6d60321cc05

Manifest digest:

sha256:d6a55b5769d2a6ea113f5056dac943f095d6446ed3e18e6d67e10be86fbbad95

Size

76.10 MB

Last pushed

8 hours ago

Vulnerabilities

0
2
2
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:98e5e2cde0c293c9860181d32fee0c73f0fdc04fb4d3c9c5abac4cb2ec4bfc77
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:f31cd06e1acd9bb75a32fcc1e5ec948d4e78bf457a74068529098aae81dd45c9
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:3618a9a60d602c16c7056a6ad15d1b5577a7f8b59bcabacd1842076dc962328d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:8f592828e4d69b90692d7ac4477619e5975e2dd8f9f5fa3c75c22aa776dae27d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:a97ff743a9452c7c27f4a46b5ee436e63a65613b1d47a519c62f19d7098ce4d7
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:c128ba6954d9ce279b9dd3c304a0fa944407128476b625e1c50e79364df7fb5f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:9db3d1e4067dfed5776b3cade5449b1edd4eaf953c7bb885991bb4eae8c2ddec
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:b2932a93ed476a160f788a15539bd45dc08bfafea35fd327476e6f9e4ac498df
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:af4f62487987c29f6d23a5701e62a0905a5cc69f818ba1504c0c0838e9623cb1
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:cdbf45f40a09917c8ece3eb90b21769bd69ba1d23ab6937b82065854d7782a86
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:ae54989e61be5730610ad142a818bff27667887d9ebe8434b105349b8e6c223b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:82f39a4fb83785d1e15b79aa9a49b19d3bd6c2e6e282c1c35c6e9dbc0b54c0de
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:6d5b7f42e3caedc7b9aa12b852b2208538b0680a3dfedd5c8bffd23db240dc77
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:389c04888325ba568f016588d95c0e7021d5890f0b40f579084c04e1505266cc
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:e43d2067c0ad376a0a8fab712690dd61a469e9a30c773a7b1ca0066bb91972c9
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:5e2a7700546215bb3c166ca34b0851803ef6b0ec0120ec510a234ee6d6ab3616
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:d0fe7ad94d09a5db92eb4de4c433e6163e24ca5a34f2430f276d5f3a9612b049