dhi.io/temporalio-server
1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.7-debian-fips-dev, 1.30.7-debian13-fips-dev, 1.30.7-fips-dev
sha256:94891903865ab0dfb08f1cd79084f87abb0da21b40c758a93d772a11a6f81285
Manifest digest:sha256:a6b8dc77049298e9a605cddb70b4b6745bb0bfa5e6e767bd68a3ea5411fcfe0e
Size
76.08 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:af6202585bd359ac393a2574bfdfa1428cdf8d4a10d00af2c2b4347f4890d5cb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:c40e60c730b2903ba4a7fabc528066611048d928524b329cf91b4bf98500d033 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:19d82f0adebb85bd1fa86c077ee95d72caf6283c1c347910aa1c48c753ff9117 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:373ecc2a1b8c79466e0bcad5949dbaf40fd405cff2ae537f2a6b2d2e89bd8ffe |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:abc3bfc93ce2786e6287e97c193548a3c38bdebb9d8f793f466805e4594952a8 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:94edc2408e476d8adb87861fcb83228e896a243477dfc796ee2416e75874ac88 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:3eeab803a57eafd28d12c98de19cb742c04bc95d8b6b6d57febab9cfe7799271 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:25a23d690ec10524f2244c6569d8a9ec8a791b84375497f11a44f54ec4513df2 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:83d06626ffc44b05a7239f0e23364c6b19450129213fcce94d1a9f185c455059 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:5b2483a0e1c298a86d266771df96d14f66483cc7039f444155071a39cdf0f837 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:33b3cd649330f3f3e4d5380d4fe855381f0351b80dfee93c4d6c4f2c5c8bd20b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:44ae1d36e90888cecb3dad039fafb9af2404292ae31881a8c54ab2a3a0314a43 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:4a183e9c062da56a59ff22aade3edf9bdf636c15c10c15c2851a3d17031b6369 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:4bb41d25f34cf813cd9ada37167938febce6180b9cd66c378e48f4c029d3734b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:7f9a39e4ff0b63dbab25c7cd79bfb928ddbb68477df655c7f372e01d36c43025 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:fc18681dfdde9efb7f1691ddcd34e3d0232f48c8388d5a3cfb77fdb386782c75 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:38d71896d419241a315f14e9c55bfc0197b0b867b0243d84ae616a3a64dae0ce |