dhi.io/temporalio-server
1-alpine-fips, 1-alpine3.24-fips, 1.32-alpine-fips, 1.32-alpine3.24-fips, 1.32.1-alpine-fips, 1.32.1-alpine3.24-fips
sha256:49f411a347f8688316e51cac8068c3b035c04a8f6a21a8104185d867a801b5fb
Manifest digest:sha256:be36421ea5f65fac97d0ca77afe95adf0f598016ff9ae8aaa16cfd3372d05c01
Size
41.95 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:a9e535540736b75248d8efa2811c3ac2e7b73693f3ccf56b9491be5fda9b3786 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:1a8255f23306069073c106cd91dc7593feb121fbc5d29f45683ed54bc0e8153a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:0133dbf5291dbb5a38c51fba374f9e02b7197bdd2bcf8e4daaae85277dac47cd |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:15e143c1738fb6c83c85cf960398e3a3e1ebf0d0e7703a0e03845a013a12665e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:ae14303bad9d6cc2ec276ef61c6379bfe9d1af2ec51ac86da5fe58c15785c190 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:c960fcb9808f19358c1c8e1ec3d0408150ce54e5726f7abd0d5fba76134a21f4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:97700dcc18e55d4fbaabb1b9d553eec24e1f691077369168f6af186dceb24365 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:e0e7747b9514cee77e84e412ca50b4a211cc14fea0a024787a1b2b2a29d2d483 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:086f332f8ea3ee15d96cc6c74bc448e8fc09993584132c400d17d97c5a1518f7 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:61c8782a5158e6e43d962f150c4a131495585cc8d36b81f6082159da1b40e6d0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:b96bd60414a0c753296153d2267c954c31ded4f75dd1d3dc16e9ed1c4ad657e5 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:bd364f7e69d57b536a6195692f4d7fe522a152136d9b1a4aecbbd1eefe93c30c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:ee01c8c1306f52d0b8b47984dbd4017df82fc8d77af891ba162005764c62b035 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:0ce73dfc5726fe204823fd5091039ba5075eab8d85d6f76031d2ee4c338cbd05 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:90026b2729e3bedee1b96951a63c398622c673fa2af751d3d8eb3d39607f1096 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:982cd6cd89b7794e6065c32ee9cab0ea360295044dcfadfa41600945991dd17f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:d82f5ecb7383ff88946fa1ba17b4b87d216cfc6f3ca50f484529cff7069f1be2 |