Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.4-debian-fips-dev, 1.31.4-debian13-fips-dev, 1.31.4-fips-dev

Index digest:

sha256:155035ab4f6c150bb131b71627c782063b92fca088c427ee7e3f8c0fb35923af

Manifest digest:

sha256:08ac3feb1e38b7e39dd9fc7b693d4f797ee5c2eac1d9d83f75d99eea5a0d8da7

Size

93.64 MB

Last pushed

12 hours ago

Vulnerabilities

0
4
2
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:31261b8468b27695d5a041a3b48a50491064be25b76b5bfcefbf498e2fb25eb4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:7206955ad57cb251c28c520d373046d1359e4be5359efd089a5ee6fb372e804d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:8fbda3bfa2c456b203e9243d6a1f1c3748ca40eb447fbfee0adb71fd3b396183
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:349d3e3fce1d92d1ea1f68ad3e8580170d5d62867ab4571aa887ee573f3c1d53
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:aecd4d65ea83ab9b3dd19261c0fd4113575715910d9a510e768df5ce8f6358ab
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:b7b2c85aa5311e7748b85a92d9ebb4c37736ba37114bbd1c11a672459960b141
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:a05722816edaea7d87426cbfdf3ed3aa316e132d98fcd6a3be1993967ecd2e4c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:e09e4623d95f219d6bf727b9c06af8093ec498cc9fab0c0015e0933405d4fc25
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:40f4b761a489ab2171dcda572f193e9b0678f9bff1d3c95bbf83afee157a64c5
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:1dbf824ec3bad6565c81a2d54c4723c144ba6a62946e177dc4c8a436182a2f7c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:9226728e1a98c01e9a50a44b3d9f475eff5e41a1700c6a1467a8faa09e4f265a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:f967292c7b3b24a0ad323ff53b81c806b5828a31bc6c1ae58da7ae29d60bfeca
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:e628f45c5c4a7235906d1e518b4c5f0d8ddd1aa28b120f64a5c39643be530ef9
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:d49650ef50f1e5a3c7658e194312a91354cd41f1787b26739f2065fc335c83d6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:bc7e5ae9fc7f9e42c84c55ab6423dc9183d23acf9a840393f2321a6cd1410451
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:e4b101d8052b91b0b9a750e828f4a72bb65deb46cfb8b3f45e823d1df16c6d2c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:69eebef222d83c67c64329542e85df258ad6ac0507f5765dee7746cca3f5e124