dhi.io/temporalio-server
1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.32-alpine-fips-dev, 1.32-alpine3.24-fips-dev, 1.32.1-alpine-fips-dev, 1.32.1-alpine3.24-fips-dev
sha256:c9b7c7f56e3554e987d588847ff383cd169239ac55731918c4dca6e982b99cf7
Manifest digest:sha256:52fb9a151bae2ded3a2b368b3a1512ced7b23d2d0758b1e82eeb23da33867fc9
Size
79.86 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:cbaad1460bb16624ffa0668682d0a0adb2c51d998cdd5b6953efab3b42e7ae3f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:5e5601d241a0bb15f20f9ddbdcbad3764697196d2bb48f8869aae6838a767422 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:65bb905a332899b3ad0be95cdbf51dd545e8c8b9116d7402dbff3d7fe0b55956 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:bc83356066cb564a0b7ba7053a7b68fa994446eb14bfddb7cbb79debee27f4b8 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:916e05cce714fa40a24ab13afdfb3db081815f2ed2990a48402b8fb666f750c4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:7d72ab476e4a70148d6df2180f58e2823dcc2ac6f9b390bd4d409104bb62bb15 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:7ccae71cf4a6b7c11be33e5a7f5df6636110c8ad98c11ddb3ebd000d57d4a56c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:dca1327e2c4ee5d85ec9f96c3e0bb99fade38d97d272ba3f731157f15429ff18 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:d30d443a55d8868e16b56eb0e6eb926e713048bb3e82161ccafe02a727876462 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:cbadd068b9932b5777c01d3a2a5642360332e1d39abd4bcbaaaad58d0681a923 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:8b016c2e0a808822c45a2c3cf2b959250348126862c2e5291e2bf56f8f6413a7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:94eed88c9b8ffacb0d971e30ab28c50260e0fe69f463d86843fa4f7d07292552 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:b5a3b813a45baa74a1325b8cf1a47a4e89f226d91cf6c8265518c2298560308b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:17e15f5148b1b688924f2108f076219b72d1dfd68bb88f7d8d216a6fc48c6a1a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:050377169ecd44f2e7643398ea8c12358115367ee01f1a40245b45cb1d30bb05 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:b6d2729eabc746e39f2b7b958bf7bea4b3dec80ab13392a077ddbde7a6cafc1c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:51963fa8571dd93d7b077b7f2637705cd8b2d4cfae379ea6aa881e760e8540f8 |