Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.8-debian-fips-dev, 1.30.8-debian13-fips-dev, 1.30.8-fips-dev

Index digest:

sha256:6daff11af462607bcee94a1b066d5c519a5dcf69b4024e52f4aaa63c4801d461

Manifest digest:

sha256:d85909aa887f777d80ff18a3dbc82b8ea1735702e4d59ec0f47b262395f17fd2

Size

76.11 MB

Last pushed

2 hours ago

Vulnerabilities

0
2
2
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:b6d255104bec1acfe4a63331d99dae6654ccc415d0562e32937fd221dc7f40e2
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:55fb7595f2a63f805388b30c6da05db4824d1fb2f833e6853354362b2dd9a935
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:3aa08c8121fed51027b7f30b5054e4cad3f3c33f59a3a797e91e82b8d4e70cf7
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:b797375944d68d0eb05ed231aa7f928ce10c0881cf574e109eed22dba24e03bb
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:0941d72be53513e237cbe99fef4781c41df4e22a007fb5cb9f96bbe52b33eff7
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:ab46c27f2656dfa77375874ec83bad021d26f171be157a4a94010027cf401929
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:034410cea932f0e6870fda8eff95d769bb4b4b1fef65de72db34beb70ac1e002
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:fb203903cf8d7e362c7e0d97993b539eefb660189722d682007247efdabe6ce8
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:84e7dd018a1875944251bd8de92de422e434959171352ac4ce30d316e52012a3
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:8640ca5016c281fea18c8b9ce07ea925e49e4210ab74e750e57555f6b99b4152
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:4f3271cbb4995dccbab3f331e70de092a3624f10b61fa8a5c0b433bc01f891a5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:1c68fe636072f415ed215d4640cb1547ac47f8edab0a6ecc7083cd64f96a155c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:0bd7dcf32ae91ff746766e8b2e030f1c3219f046bca109846bdb040f75922bb8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:096ed39eb30fe5085da28e96ac3c60a5e12f7884e83796b1904f8e4ab7bb1831
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:2999f0bcba084cc26bbd45adfd361a3c8015264089ca75ef939420e597d4ac03
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:274593d23a0ffb322340c07cee62dfbd18e30c37ede07e935b4f3256cf433987
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:0d432f1bd105fce7d0fb4b50ec6a272ad6449f23a5a030095df6a9a493e2f0f9