dhi.io/temporalio-server
1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.8-debian-fips-dev, 1.30.8-debian13-fips-dev, 1.30.8-fips-dev
sha256:feced4599598bf0776c259b86dd3acabb6f2fde14599235e95432bcf1ce5fcf3
Manifest digest:sha256:17c1cd334d6ef8279bb381450ab56edebc9d907f7549de09ed15bd644fd3e156
Size
76.11 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:71ceb5be5561e6e1ee577a1cbc90507f645e1572a51af7a7cfdd9890d107358c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:e907b1d160c6d8cc4b5eb46638b97550397764240edf33af7da7a598bc47845e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:d8512cd504348fc138f7d6cfde53f249c8e7be6747dd474719960805ea6ac7d3 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:c53b773a2cb6bd4dec80abfc7fc48d6dcdbb22f0a6fe2daccad5511665dbe12f |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:3d311e9cb0c14b8a298fccf7ad9852dcfe94f5333207a271f6c8c597669c46a1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:36f674eb530ded8029947d2c0ed0c870027cc518fc672ae6fcbcf0cb22471c8d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:970458185ace376cd6bf6fe9343154547efd03fb73a935b11037d9ce7eefa79b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:fb634b00d5ea689300c76723d079abfe70083539503ca5561179b730874a9e5d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:e0eb7bd95be9d06fb0fca261f9b1a2acf3c3fa2dc216df5b9384dfe6ddea4acc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:86e14b9c5eb894eef0da8caa53fef78413b201bf07f1534a34b47ed455133931 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:f2c1c85d438c3e21da65059f35171498d35767de0dec25c3bdfe4935d8116c4f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:cbcbe42dc746c2985e3f1c84ff26f39eb3cb918e44c188655a252cd0d7cec8e3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:6ee2ef9ec976a1fbab25cef2bc01b20592997a8dc85d4477fbf94151ef51a008 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:9bbbb4b1603e7d86caca99be82f9fca6e3848e9d2d4301a798255bdc19056d64 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:45441887e9620b4481534aa26854a255c55547146a3be0f672ac4ac4e24cb466 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:53fa175d49c5452f1c710eb80a2764d53c0cb05f4f6e3f6119fbb36cb6c670c4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:c3ba77f5bc6db1329c000a7f5f27648da8d4bfe2e96f3646bd86dc156ed4410d |