Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.28.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.28-debian-fips-dev, 1.28-debian13-fips-dev, 1.28-fips-dev, 1.28.4-cli-1.9.1-debian-fips-dev, 1.28.4-cli-1.9.1-debian13-fips-dev, 1.28.4-cli-1.9.1-fips-dev, 1.28.4-debian-fips-dev, 1.28.4-debian13-fips-dev, 1.28.4-fips-dev

Index digest:

sha256:22ce152c82783ebc56a92553947d854f2ba6edf97e8c16821a520337711e801a

Manifest digest:

sha256:59494ae3b6fa0610c701320f7f5e57e811ccf2b77c47f6b036cbcadb831f3a72

Size

221.27 MB

Last pushed

14 hours ago

Vulnerabilities

0
1
0
2
13

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.28-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.28-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:e8ae175c96d6e05cd879826782a6878e60c687de5da6fc63b9f4919735b43636
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:c32511a828f8e314733bef7d56c0891545ed89c66c9895d3ed11ac4e944170a7
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:01f541e1dee8c22485e3d3454b45c3317ea0ed71e64a38c80ea6d842ce7f7a45
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:beea8174310dd6d352b576564cf8b7e6720c306afabff36f36e5981906cb975f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:08aaf48c31901b9d1874701c976327eda6c258d3fc3ce0ac87d947e7d16d7c21
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:a9ee1c010e921ce2d5083c935aa88769812bad28cc02abe4803f547e4c336621
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:730dbc37fa1a2aac9ca7bd7124cbf79d1fc2ac3385a6bdb80eb0db973140c98e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:1545622e92dd4df3e6ff93dea050eb78d3b0d483b06c5d2ad28291dc43178355
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:ce22f0f25a805e3de9d81eaba99380687c6347ba9644ae9359f80f92628ed33a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:e65f10565d541fc2a115a29d27f685c0ab0b6526da45602f324a622fcf8215dc
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:a491f5426d864cd4100f1dd754297217e70caa929de316f306a2a244b6da1c48
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:089992a520ec9e31c6e6cda11579d61a03ecffcc01cb87790d04f2617da06543
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:3047f431a2642490fb9ab9b5805d9dc1de0b92173df79a4ca5223518876e6253
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:4f17e59010a17c753dd9ee5caa1b48d4333d54f9a8dd5b48d34b5054843db06c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:b31879477fb5aac46eb89a52d062e4115c0e5e3b859d887890eae106d95eba33
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:60bc0a9feea3019c2a5ddbce5e1dbf5284c101b7a7ee7bb515f03b67df541cf7
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:a836e5897fc86c9b1071ea1dbe782f80bee7b9ea6af8e2b5e1d75302554053e3