Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.7-debian-fips-dev, 1.30.7-debian13-fips-dev, 1.30.7-fips-dev

Index digest:

sha256:f77052bbaec95432e44b7c4dd5e0984fcc1920230ba8bc7dd6b5e387e3448cb9

Manifest digest:

sha256:c776263f65b7ec14dcf7805773493d83ccd1c61797e563c81356bb75747ceb21

Size

76.09 MB

Last pushed

3 hours ago

Vulnerabilities

0
1
0
7
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:9f3892b0a6551f4ec2daa0d25595f30c4814fc460a7d8f4ed31c77c51588a778
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:4ad068f672151e9dcb09049b1ffe5204a981d08deceb8552cf9e5a83eac399b4
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:782a864c6881806359a99ed38fd222f9b2a8f8db17697df3df6724a58b8aa481
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:3ff2c35f5f77175898f235d52daf3f9f6a547c2504fb598742faebff6e4995ed
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:c983c1292967dd16e72ec9d4a8f470225cadf5597d8e91acaf89dec4b871d228
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:a57fd0e2012dc5670678e151a852079a115261bc6e98eaa74623e198454884f8
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:6414388f021a13df0247713275661cff60fc7c3001e3b4e27bdf3837f8371fe9
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:0a1a6f8d46d8054b40953624f31d05ff2942346c8794963f090d9aefd4bb1ace
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:0411dfbd986316acc5a9690bc144267a24f6e4a6c9c950043cc34a0e4e4d30e3
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:060f161c077052537ad6100caa3a77678661eb3714d72a101e9a3fd3825b1735
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:87e4361eaabb92a0e117a5c4fac501ce21fd1d64153ac20dd83c36dc1154a231
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:41565f7de41cfde959caa6e906c79d2e2129910af0d735e7b89855e56567e677
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:2908032817f89602fb3d3b17e220a84fe32edf841c667528307c346fc7536975
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:29d4c42c76d243a22720207021e6d1d1c009e064fc35e5964002addf6abdfba1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:cad0a9dfe4e7242ec8c9f1399e21b46d5a0cf0545c1b881c78181d1016aa5a59
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:2a228298838b49ba826281fcea33e2f3cd61ce26e091848a45e350dc67d66844
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:31e9e9a3ee9a593ad25c2f0f1043712abe7c6415f2a584a2f350aae51c44ae74