dhi.io/temporalio-server
1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.5-debian-fips-dev, 1.31.5-debian13-fips-dev, 1.31.5-fips-dev
sha256:65a04a509f525e378b73923e0bea73c2851fae3de8741820828fd06dc06b8380
Manifest digest:sha256:d7909c4c2dfc71a52c28f761611c488cffec9673b32e20de52b8f66fe8792381
Size
79.76 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:800f4fc969ec2e5fdcfe50fd832731c9b2ceaa64c2b8e47ad04a22a7213a1ff0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:e69012c94887ad2d61b09558775440ab0e349a46df3421bf7c9064f8225efe33 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:4ee50764752099d0bb801100ccc42e6d134f1f1719d1fce3c486662ebfad860c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:732861cf21048af938bfc0e74ed01b98198a7a135dfa9f587c41898602210d38 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:71b83b263c8612461cd8f53f301da02567a99eb842d9a98d63ad89d822265c8e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:78aba2bc335851968ce0c5c85bfe83a3e99124158e784450d2e1aa44adc689e3 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:f66b1b218bdda30bb366799bfb625005c63437bbcd1b1b7a224c1d8bb6f417dd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:c796d2607bae84b3bdceffc9bbe82fa1de6c74c52f2c50cf0476a3dde3f5f5d8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:f5ddb6c9cf34a0e197f658e040d92745f2b967a851e634827d0d90b253195d4c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:f55ddd8cc61ed29f5fefc868f34faab23bda5b509a30cfb294818f435b4ef4c1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:e5fbe2037aea54a9b0f517bfaf3a50d4cf7e327f40dec5cf50968e8e9e18e044 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:2be3fda865a564a6a30dece3bc42688d51b72b34c9e45c4adb71cf4b574e325f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:3f188d4bba40e6725e06c4a13950863ae3934e4bb3b422706b9ed0aa926ef725 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:0d1e4819733996554e64efb3650e06080a80e1b418ed16e6de5cde432de24931 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:005aa8f2f45fb6cb2b15b5caf49247f458e658fe817fbdae5f9e606ef94b1bdc |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:bccf44c7573a5f9d0a9b90eea4327daa7ac305506d47164726eb393b5b8adf59 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:889580c3baa687461457a328c292f27d7a0bf1cde60dc909c122ec49b38ee2e0 |