dhi.io/temporalio-server
1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.9-debian-fips-dev, 1.30.9-debian13-fips-dev, 1.30.9-fips-dev
sha256:165b83fe63b8b06127fbd410b8fbea8466af9d3058804935fa334e4713da44a0
Manifest digest:sha256:b8129c8d8c0566ceac53c4683bce98cf7c915bd2fbd8fdbba199fcb4a12bc912
Size
76.13 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:a004d2811970a3317ce9f1b01a75e260bda539a8ed7c436f5f2784473c8d6aac |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:5cd27c7ffdef38273f9f82a6b29ba5363af3674634df6fa0f56bd9e68e706cba |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:4ea96ed03c5878b3f42cceb18814d4ec0d450046b2ccbbdc26aceabcec43b483 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:a9c9fc7cda6a841d2dc0b430d5e6b48002aff38c5b9910ebdeff192a01b52500 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:d2efe2cec1beac9d357e873316eb3cf887f47e97bf9ddb2b55ee90e6ae076e6a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:9f5f7700321693f15cfc8da72b05e57e2eec0b63376e1e4ed0ac4eebb4339fe0 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:55d719aedfdb418af23f85c940f8ca3ac3d9309374229f27922cd2551c737983 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:cf5608714e2798cf1df8026740bccb143798006a9f21cfc940e40189cc07ef33 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:ec0fcb489f9b70d554c31e49a9d4ab58d39f07c196fa28ba77137c8b7f895384 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:3a629a840091b0beb4590dbfe5f7aff6af8f8f6d7215cf822965d0027636e8ca |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:f0877b454fdad437e0e22102ce4680e449dc3c1044772ab022f4e9a6d3e33056 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:e9d5a2533ab528fcef6962dcab2df2640a87c2eb3338cada48d1fe29b705c3fa |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:8279e8df21cc8e9aeac34d22900fadc73aa01e8240a1e3285ecd9191c0ff2590 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:dc193063a673055dd095e5f5d1a5a5e28135ea3436e1f8a50d6c9f923ccb5cb6 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:018b688391fa4e11334df3f3ff4c7546f33711d36f8cd00183a078273dab24d9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:129a3353304fcf4797e4f3a1ed4d2bb7ad4e7624e04ad10febc167e6ff3300cc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:54f71af414518b2e0e4817e13e58476179547d837884532d69298d7c6816842c |