dhi.io/temporalio-server
1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.5-debian-fips-dev, 1.31.5-debian13-fips-dev, 1.31.5-fips-dev
sha256:5dc57995167a6139027a10ce2c4b166934549cd6cb1590a22074f803edd36471
Manifest digest:sha256:221023ef8ead4a39067b2220c70525ed86f25afa08bfe8505b5c2b5ab5f12b09
Size
79.81 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:1f92be3769dd7e0e7243ad94cd8be844db33dbb2579dadff16e2257eab0f1baf |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:73ab088fb14ffc5405665ead080ee6884e88fdac0468d4cb4a9b015abeb8cf07 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:b5cd0329bf3fa6ca4838409e3a3052a0cfc7883ed8b5c02b82d84c5d23f2ab00 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:b0962a24d7ff5544336c1036f70fe2d916b217df4f849f99d4b9b9f26f9c93d3 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:be1943a2f4630310a15a258e530b5abd056fdeb7c76685c178464ab187307a60 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:b10a763ee0949b1900a8609118e757e1056fcc31bb97f2d8255831e43fd144e9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:83bf1269c49cab680c04e3ded6b0e2a11274f36630e68fadaf696b443b238b38 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:1c2e80b8e24772e7edf179f57003d6c67966a46bcbec80cb11512481953bdf97 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:4a1b57d8a499d3068dfdeb4c7b155fa7d87a8a9de6911dc3a682fdc4a310b7cb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:9ae361e36ebd6a10603f8fa76e8fa7716d947d997c057c201085f03c495ca8d6 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:59f22311e20f9a247b87e06112ec18a25e357550d87b0dcc5f3a31ac6850aa17 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:0ced2de2863b744bcbfe58f1d4920fba2e2af84e6d4b38030595f39296c01c95 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:bff5ab66dacdef11a5bac7a9dba4220641511a12df444731d311388c1681ed8a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:f079f6e1a0e85a8809fa0190d0c2e5d8fb79e20a088bb7628b08586657c7fc89 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:d3829606aa51c8cbd06b49730779b22e659a21696a416225048b1e54847d1532 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:373799f2abe44256cdd155eb7f1651f34b1e1c5e7fe68636e82911fb6a99685a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:3dc833ec259969bbceaa288b7ee6cfe7b174482352b72804367d1f88f700be81 |