Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.8-debian-fips-dev, 1.30.8-debian13-fips-dev, 1.30.8-fips-dev

Index digest:

sha256:56fac1b8446a1075613fdb5ff9b6cd56dda8d05532727d2a552390b83298c261

Manifest digest:

sha256:e465dcff5e52168952a480d2ff5242658b40e4081fce96569a2eefbd0e5f8bbb

Size

76.14 MB

Last pushed

7 hours ago

Vulnerabilities

0
1
0
7
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:185ad5bc6a8f8a32c0a078a2b9cc5e74ae05e0084c8a80d14c711b4a20c469be
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:d4ac9ded88296b0a78aab205b4d383a87db96f88b5d9b6a9955c294b84db26d5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:0a1f9d7c358038f70e1c5292a7c963bf4ac5a458429c4c3831c4e0a45769d084
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:dfbab7d16d41cdfddc028e46eea017cd7bff70740ddb88b621353a61ba91eeb3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:2252dda5f367783ea24ac1ce1415b2b5adcbc06e9c320f1b9e20a1cd69a326a8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:edb7873ec20eccd3ea7a0828e95568f6486ddf5846e2edd32ddcc4e5b1276c91
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:f4dba52f75b42823d54eccf61381588ff8164fecadc40da6947fe94d99bde0fd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:778b61ed082b954c55582e7bb0db9824931e8eb28912df8c50e1c42906338032
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:baa9f5a02c875bc70090f120689efc46b462aedade0fdbdba0038b2543e7f33f
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:f0203116fc5b453d05b58972995d6cae4d71df063802f9b84e4a81ef9791be82
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:87cac6adbe01ac078628b3007ee842e1d387e80027c84098357bca99d18fccbb
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:4330d1e32d42149cad888e85ce6d13e72034efc2096f4badec51860561e9bbbb
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:e8791c43409181df5dc23529d74c36bac8f388b6171ea6a93251633531ddea3d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:6617b911a8561855c17a3b0ce367b3e5916879f9950d202421fd04df471ae3c2
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:5d7ebb2fe313ef27456d6a5073adda272a9139b30995448a698ffe0012a12c3d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:027bef429b271b3e5818d23eb32d6e1f75581fb7eeaf1e099566532a4789e7cd
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:ab7fbc5eb2c6cb89e64ea5ed16486044d132d3c3174fd2ed9e334d77e81178bb