Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.8-debian-fips-dev, 1.30.8-debian13-fips-dev, 1.30.8-fips-dev

Index digest:

sha256:d0b709fe9b9ff6f1ac4dde40049c2e61429d588d34a0758f367fc972c5466a2c

Manifest digest:

sha256:8ce64d1b8c9add0b0dc49401009e43150e114096a1785589582b36e6cc4c1213

Size

76.13 MB

Last pushed

12 hours ago

Vulnerabilities

0
1
0
7
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:ea1dc0f1a9d72232640ae4e0c9e125dbda1f460bba01bb566ea38b3a964f74f3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:3dbfc93968106e23d23b78085a16054ed53e170f651ab4192b88b5e0d726565a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:740ebb55870ec8f74083d044fe3f8114172c2a92627c3268c78894ea71b5161e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:7c960b83d8e9ade52ccc2a108792b7be043e2e7822a36f8bf2f380f3647b2a74
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:c668a04a78e98e3694f6a87b8c18f45f7107285a099e1543a3e6b5f85edeeacb
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:48f954fef62e8ae5b9b689b09e2d11700491a3b59da37bebd53766cf90886ef1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:619f58ca904a9ceb94792969e879064a884ff3ed77d192347b1931cba5158824
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:eae6b42525c58fe89df48c0e8eefd2cf8456ebf3612efb1d08bb669cd030b67c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:55d50ae44baca63d5162e62a7abedac3843186d1fcca4d152c375bf50d67d6d7
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:695fa612b2f631b8e9ecc6691695d3fb6095450d1c0f8719aca798baf312155e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:b5549a6fbd3aae035726684060904eb8de75f675dbb5175207ab0c0411982537
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:00b358f13c496dd203434c13a42b39c8c446992099fb4ea4480ce034f02ac7cc
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:800e4e03b0a3f9b7e668f54919f2ac5d792941274df01f777fee3b7445bccbeb
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:e987490d547bee743d84987d8c0fa6c879578d9b01726e51b0b55c693a464552
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:594cc3071e7ee8f4c7e49c88abce74c849eb468eb2a83db655ba6f89439ee34f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:9221066627bf7c27ad33b007d924cdc3397d47e1447693adf4e6cf046d68d94d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:9535020f291a84e18f4fc27070d268ab76dfd8dc5b6f05d9f0d2d022462647b6