Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.9-debian-fips, 1.30.9-debian13-fips, 1.30.9-fips

Index digest:

sha256:2ffa276ab492afdbe4806cf631ebcac25facadbc05fe42fc6c50b9801481a21f

Manifest digest:

sha256:dbb5a9cb658519b79aa20724e3ef4971e708e8c13d873f4de25e805d99f53b6f

Size

40.24 MB

Last pushed

46 minutes ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:748007b8fa36193ea86b24ddd427e440eb9d4d9798e404a17049f701aa0de5ac
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:4f7b4d38d0a47fec84669e74cd04830ceda1d01995e988b8558fe9aec8eeee9a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:6a905f544b998f69be73dede968d05a94e6c85c391d045f52454e678189ffe36
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:4357e600bdd05ac0c295425c8377b16069982bab7cf7790ced83fa8cea0e7dbe
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:03166f90f9f50fbadfd6100ff68548a1178a32ba31741ca1723cbdef85b9031f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:7e3ab5bed45f9da38fe969e880f6e664d223a50d8660160943021f40df949312
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:b6909c8a796df1bf3dd152d67e54a8ca6f1902010bba898ec7724db71bf6303c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:8027b80258fbf29cd80c5c722124dc4bde643d5102db2369a09666de09328dc5
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:353e466b949306f80ea4f60256b212ea4b2c68c7363bc7aedde69b2c379d8c65
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:94f642031262729612dfda5e9ad71fd371d778370273ef3d862a5069d407fec4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:a0a36b7e8ea038f89e4af0b2e9f673e5bbb37097ccababfb9be55c11683660d7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:88aa596b3ac4562ddaf5a1288a1eef5f0205498abc11d6fd4cf421861d6304dd
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:129447eda7b3a5ec03e2193d70421c1b249e587718efc2af0c6ce40c8a49953f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:309cde3339450c0fe7d5493be137164e68766d5eedadd99e96bd6511bed73d02
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:b055522cca79122505320877c45c5c7fb34aaed17b74d4a3edf05e33bc810ec1
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:1e7386e5376fab26d1c00db9aa7efc0792761efc6d18c11c89cde94f725756d1
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:00f91f8f69338c7161efca901be49634ea2b87d8898dfa1123b86a3dbe066344