Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.4-debian-fips-dev, 1.31.4-debian13-fips-dev, 1.31.4-fips-dev

Index digest:

sha256:e6814bfce971a51c21a527d73d4525d4a5b9c038e97c60146be1ea560185ed06

Manifest digest:

sha256:17c5e8c816cf2f18cce7ecdf8235ebe125cb0c0a29c5377e08b6484c2fd3bbff

Size

93.64 MB

Last pushed

6 hours ago

Vulnerabilities

0
3
3
23
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:f2ba6e6264edaab2ae9f2b1e175c6ddd136216584565ad2c3b6c1d9de1fc5693
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:78532fbcf66688b2bd9feddf020a1d94b119880ef5625734005d06604793d43f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:60a52405d3e92061e45b3266ee4f95a5f4e85599693de14187979c46284af812
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:694169fa7ff4a11a0b5c7d21dc4373f8ed1c282d7759a854ffbfdaaeeae40db7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:442672acc3c6b334e3446fc99e25f27c1e454c90fe3225920dbc459512364106
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:af1f803f2bb295575cae640ed3441beb17ccdebaa4f1dbf62310cf8eefc123b5
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:b83a825ba80fecb3f4502e5ce536f0d1f7e4642e247eeebd6b40c1ebb9190677
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:3bf83ffb7d4a15c12d390ea069dc5f4d3b50a64523f8c90c9b83a340133c0c18
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:0c8884d3dc97d2276a53bedf742d5788d08cbb247f0b0310a89299db946e48be
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:d415d618e830bf6e5bdb4cc48108eba316b3610dfd1906e2e4c370ca247e7650
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:9e6f20a66403d7d8bd1862cb007f532e2911df72067d6c2f9503723d41e066f9
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:76614e0879b07df9b60c0e98b984e312d2efad0be227e61a3a1dbaa46b635356
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:7e8ef59141ef9e9d1a434ecce9ddfbc1e9873754e93bb8a07ec1933c21823f89
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:64969dc7a0614724df166a05d657efc9bad31d00f96fadd4aa56eb0de686b1ea
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:afb3ab917fe11b44b91b72ca32297c687a92b358693766c8a87bff52216efb31
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:95c1f0d8d2b47da32009c8b88bdc011c57ad862da758041bb46110081567201a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:aaca0fa93b0a61e68d22c7d9545526a9308b7add01fcf6416a440a7073de6148