Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.5-debian-fips-dev, 1.31.5-debian13-fips-dev, 1.31.5-fips-dev

Index digest:

sha256:112634c42e3cd4463950625d38723a085477fd39028d7d81300b164fecc2b8eb

Manifest digest:

sha256:97ad0fb7ebf96cd08f4380309c5adf6893972f40f297e5710c9dcded8c62fe0f

Size

79.77 MB

Last pushed

4 hours ago

Vulnerabilities

0
1
0
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:1c4adf7cb3b8b3828689f7624a5d8341faa277506025769cb56a4afc25a630e7
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:f868a1a7845988c384538c6089bca23161c759e2931b0c5a0bc6aa954f500500
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:492bf352eb540584d2dae0e23e819a06b3dd737f6c2d19a556600747235b9b27
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:da8a26cac85023c8ff1151b14b5541fd5bb758cc19227e5b5f60484e50de08da
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:b628f34594689eeddbf24e8a39b3f493c8a75f8559ebbdceb88747f886e37ab5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:3f527d42556f2b8f689c1be13917b00eb48833d4990ff1ba7e5001550fa2f6a2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:f7e364ede5e553fa419b3a7e67154c4d0c39b6336df0c833ccb76cbec222e1b7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:932b079012a5f96bfb9b6fd80349664e911a9e67770f9351d22a3d85abeb3f55
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:42b62171dc43e190f47f022e5c7bf442f745217b9f62a703705a03945e697155
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:6b40e661cd50967fb61d3e08c877fa25902fa19161b724760fcb92bfc7b353fa
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:ff2138e423bbd33f8b3f6e999c5e2066ae35f0c84ae6966187f5ed72424ecb2e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:35af3396cb65c31d256c4ef6f4233f2eeb3e9628adcfcdbc66bec00fa20ab7f2
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:b098223b862b6607ca0c5f76fa4df5af9b4c7717a945c691fed078340e7e2988
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:8d8c484614bf659ffffddaa63b930899af09253680008f58a7f843f78b8e3bf0
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:8ace69fb3dedc25891de1abad6f4b0880e4730d550c5a954e958efc31115d7ec
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:c2756377dd8cd126f03f6e949d4316b741cd8fd9e64682409ccfb337fe3913a7
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:8c0278528f25dfb74b13cd1cdd9d8ada61142f0d62bef20c2ef306cfaa84d337