Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.4-debian-fips-dev, 1.31.4-debian13-fips-dev, 1.31.4-fips-dev

Index digest:

sha256:e105d3a070740ccfd1b62ff73068297b35e7916c4a77dda0997a5a497756f7e3

Manifest digest:

sha256:88c30218bf89e8e009440d98cdcab3ae60d8c77d9b696fb4be4c5cb84ff8522d

Size

93.64 MB

Last pushed

13 hours ago

Vulnerabilities

0
3
2
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:5532c98e97ed88099741d30db172167a5a16506741fad00d78f706529d53741c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:c8fe6deb83ca0f5bca96902c7bf05f29684c54e87bd54d30ab0a6ffa3801e698
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:b03ed5c9f28b0af425587fbef8d5164fd7c4db48fe914b021a41240775fa2c96
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:5e55d1cc66b96ac278d447b6846fc97925b2f972e95488721813b1d63aa6f993
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:4bcf083fb1314d101c0b74c738542a3aec81f0be326018ad9661835d0ee2d6f9
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:f6451b86742864de2baa4813dc46b6a5c4af21d986826b7d345d4c4d8aa494ab
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:b08993e40fe98678ee35a02ec3b695ca741a8deb9aafb4de167252f0981a51d9
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:1e70f2b91f8253951421ef9198710d9141d195fba7d3f4622e2132d3323eb620
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:a98f7e568a7145b66fea04c501c5626f1d2e631aa426fa62bb029ff1f220f5f9
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:f96b2c4188ddf4c9fe9f33018574a04b91ab1f024ddd392f7181e01c253d6fa7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:ecd1d25c12d16cbc8ae6b389eb3447482cf4d6ffa9182192c5d40edd3fdf4c36
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:f7ce043cef8ac99f2ce3f7c54939b816e5c6ee8bc08cfce10402979c243f83a9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:aa57b388987df40234e034164043970eaae04152feec6139af605a89c642227e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:a30514fe255d44b34ca059c941cb3a1c5299aa2b5e58297042959cf14b28d5b9
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:3ab34b7cc9f242d272c6ff2aa6fbc047700a1ed80a276d52fa05484ff345e684
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:736094db556f6b40007520dc330e249374d93c04c868424e7d9ceeccff21f66b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:281ccddd8aa62a32d66a7e913767b4ef31b736b9f917d196c929de0a9d96d3f3