dhi.io/temporalio-server
1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.7-debian-fips-dev, 1.30.7-debian13-fips-dev, 1.30.7-fips-dev
sha256:2ecdce2a099012747dd859bb378c0e4fa7f5893e31346abe4c03ba7c45f7fa65
Manifest digest:sha256:4e16d32f9500cb3cda4bd8a07fdb7587fde5595d4c24a58b651da3f58d3bfa45
Size
76.08 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:c00bc0d11c1cf021e14b092d24599158d3fca9d87f8944d3594f5e7c6cf678f7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:739b7655cc84017332d8aa914e615eed3e091d838ccc237bf72269ccfb2fc979 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:aed2328c0e3103cf8da311edb20f1bacda5fc6b9022c45b8cc821d6867a38723 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:b8cc54962b8dd1f29e226bfcdb0218b2809925a475f8dc9e4b9f15306f069067 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:6dc52ca3d86e3ca79227516866ed63ffae106117e0f55c71914045d2a6b850cf |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:38e7a9b5a50f5c70a6655ee91225cf43ee2d3a83db9c1ad44f1098aa5904422f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:034554788c5ca5875bc57ace61b12c21cae84235698254d13e13bf0f6f2424f2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:934896b4b6d7dea374fb5d0308aa94adccb4b04d1549f6509c2a87530305495e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:cb14774d71fcc421513c8ba8f6df61ec8f7550ccedac035ac8c424d0016567ed |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:ba28de0c885e7751d9dc77c32abdfbd13f95202bc2937e31bd194f76049ac356 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:1c4fada78dabe05b645c07124eb02298cdd92103e32880608576645a534d7e6d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:25883191a782ed25dccbba00f1618f6312955570ddf46fe22eeb859404dfcb33 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:3bbeebfa404ef7c0f575b94c17a8ddccecb707133beffb1cbb496eb8a1da4f76 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:daa684f9d8fe2621d88574206ae2f797828e0ecd4379aae5c60ab1e3752e4f85 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:a027685f6f5b58ff01531aa5d6d95d2a4b5ce90c265694c2512277e6d38ab1f9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:ab91900cbadaf6dd874c07ad37aa02c13e166071ca1aed6afab8364bb0541f55 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:6747cd3d2277c8ca1075025bd2be64f136b19c6480aae700ca5e2b0852fb2622 |