Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.32.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

1-alpine-fips, 1-alpine3.24-fips, 1.32-alpine-fips, 1.32-alpine3.24-fips, 1.32.1-alpine-fips, 1.32.1-alpine3.24-fips

Index digest:

sha256:49f411a347f8688316e51cac8068c3b035c04a8f6a21a8104185d867a801b5fb

Manifest digest:

sha256:be36421ea5f65fac97d0ca77afe95adf0f598016ff9ae8aaa16cfd3372d05c01

Size

41.95 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
0
2

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:a9e535540736b75248d8efa2811c3ac2e7b73693f3ccf56b9491be5fda9b3786
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:1a8255f23306069073c106cd91dc7593feb121fbc5d29f45683ed54bc0e8153a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:0133dbf5291dbb5a38c51fba374f9e02b7197bdd2bcf8e4daaae85277dac47cd
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:15e143c1738fb6c83c85cf960398e3a3e1ebf0d0e7703a0e03845a013a12665e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:ae14303bad9d6cc2ec276ef61c6379bfe9d1af2ec51ac86da5fe58c15785c190
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:c960fcb9808f19358c1c8e1ec3d0408150ce54e5726f7abd0d5fba76134a21f4
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:97700dcc18e55d4fbaabb1b9d553eec24e1f691077369168f6af186dceb24365
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:e0e7747b9514cee77e84e412ca50b4a211cc14fea0a024787a1b2b2a29d2d483
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:086f332f8ea3ee15d96cc6c74bc448e8fc09993584132c400d17d97c5a1518f7
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:61c8782a5158e6e43d962f150c4a131495585cc8d36b81f6082159da1b40e6d0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:b96bd60414a0c753296153d2267c954c31ded4f75dd1d3dc16e9ed1c4ad657e5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:bd364f7e69d57b536a6195692f4d7fe522a152136d9b1a4aecbbd1eefe93c30c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:ee01c8c1306f52d0b8b47984dbd4017df82fc8d77af891ba162005764c62b035
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:0ce73dfc5726fe204823fd5091039ba5075eab8d85d6f76031d2ee4c338cbd05
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:90026b2729e3bedee1b96951a63c398622c673fa2af751d3d8eb3d39607f1096
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:982cd6cd89b7794e6065c32ee9cab0ea360295044dcfadfa41600945991dd17f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:d82f5ecb7383ff88946fa1ba17b4b87d216cfc6f3ca50f484529cff7069f1be2