Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.5-debian-fips-dev, 1.31.5-debian13-fips-dev, 1.31.5-fips-dev

Index digest:

sha256:962f800cf7b87d98f8e4531395cbeda60158de0739e1aed7846d058487637702

Manifest digest:

sha256:4b652393ffb22c77a75e624072d13a7b451f876500c364d4ab5ee74da292a4db

Size

79.83 MB

Last pushed

12 hours ago

Vulnerabilities

0
0
0
7
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:32df58900dcb3e43aee6dffe068bb07c6a06f726213788da495b4741533f4029
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:a3c002be3c61cd81b60e037678952878daf196a67d2bf611cf739528f10d48e2
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:6302faa8fe671c61126c16cf598ec18b07f1ce10112115a3c5d6ee12312b5fb7
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:77d84831338cc503b47e80f41ed3cf22868690a340f640dc24184ea2e8dab95f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:d7e59136324a75ba1bf685339c81498cea738e829f944a358669ab4ed3841a42
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:1754ea5fe5a6500419c2a81397413b0dfb2d794be5c6a167276b77505d0f166f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:2120605fdcab58a438f053c7d2ad55f1c10a44b94940113c7f308c595dfa4909
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:37a389aab5c02d3805465876e28bf4111354c2d382980655623e147a95bcdc1b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:28105dde68c82603ab32b2adf4ed605d6c7b7565a18622903bab0b056e10cbb4
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:de0ab4d87e457897cf726575830a8123ddd015141150b23330eaaf1c0681ad8d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:dbcbc6f284f6bc26fc94c11b89e229ced266faccf9d84fb94217893944cc031a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:10869f1332785f900a2ac39909b252b200edbd2e9bcd29d76568dceaf901a79f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:51217443e9c0ce7372fd14addef35623ef07714c25c0b1878ee5cb8aef385932
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:420ad7a138f6a7b8bf228c329a1a7af15dc053fa168182f99bbe477b06ed0fb1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:0ccfb703cdd0b320579ac9cb598583b29933dbc4b3e924de6dbe4289f9125f0b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:c56128fd1c240530bbe019a4c010c03ee054c5ae1f62af23f10d307cf28087c2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:a59c8d0270960de6dcb987f653fd6334ec70d31dbf6f80abc351bc50135b96ac