Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.5-debian-fips-dev, 1.31.5-debian13-fips-dev, 1.31.5-fips-dev

Index digest:

sha256:65a04a509f525e378b73923e0bea73c2851fae3de8741820828fd06dc06b8380

Manifest digest:

sha256:d7909c4c2dfc71a52c28f761611c488cffec9673b32e20de52b8f66fe8792381

Size

79.76 MB

Last pushed

6 hours ago

Vulnerabilities

0
1
0
9
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:800f4fc969ec2e5fdcfe50fd832731c9b2ceaa64c2b8e47ad04a22a7213a1ff0
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:e69012c94887ad2d61b09558775440ab0e349a46df3421bf7c9064f8225efe33
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:4ee50764752099d0bb801100ccc42e6d134f1f1719d1fce3c486662ebfad860c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:732861cf21048af938bfc0e74ed01b98198a7a135dfa9f587c41898602210d38
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:71b83b263c8612461cd8f53f301da02567a99eb842d9a98d63ad89d822265c8e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:78aba2bc335851968ce0c5c85bfe83a3e99124158e784450d2e1aa44adc689e3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:f66b1b218bdda30bb366799bfb625005c63437bbcd1b1b7a224c1d8bb6f417dd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:c796d2607bae84b3bdceffc9bbe82fa1de6c74c52f2c50cf0476a3dde3f5f5d8
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:f5ddb6c9cf34a0e197f658e040d92745f2b967a851e634827d0d90b253195d4c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:f55ddd8cc61ed29f5fefc868f34faab23bda5b509a30cfb294818f435b4ef4c1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:e5fbe2037aea54a9b0f517bfaf3a50d4cf7e327f40dec5cf50968e8e9e18e044
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:2be3fda865a564a6a30dece3bc42688d51b72b34c9e45c4adb71cf4b574e325f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:3f188d4bba40e6725e06c4a13950863ae3934e4bb3b422706b9ed0aa926ef725
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:0d1e4819733996554e64efb3650e06080a80e1b418ed16e6de5cde432de24931
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:005aa8f2f45fb6cb2b15b5caf49247f458e658fe817fbdae5f9e606ef94b1bdc
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:bccf44c7573a5f9d0a9b90eea4327daa7ac305506d47164726eb393b5b8adf59
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:889580c3baa687461457a328c292f27d7a0bf1cde60dc909c122ec49b38ee2e0