Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips-dev, 1.30-debian13-fips-dev, 1.30-fips-dev, 1.30.7-debian-fips-dev, 1.30.7-debian13-fips-dev, 1.30.7-fips-dev

Index digest:

sha256:c0e80dc68df65d68d684852c71c0d8213e46856ce821798830e116dd8ec13edb

Manifest digest:

sha256:e2c95531ef849d013ad2f90ce5eb68467f340eba9d28702b21db6622218d9135

Size

76.09 MB

Last pushed

10 hours ago

Vulnerabilities

2
9
0
7
4

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:72e7ceee08f52eb5a1168a0564800d97fea26f9162a18e9c65c4e1b02c5822ad
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:56e9e239acdbc2907c60ccc6293f0f87f483bc9978925266dc432b09ed49298f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:39eaa7ff859da67dc75a7e35dfeba20de9d227449cf7a8dce2fab3003c810543
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:606452fd72d185e34a2142c18f8ea11f290605460951a624a43cb0df498b76d1
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:68fe3f49566287bfa8eda4ae6460c5711ec1705b4cbea139a5598339cd8e5e14
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:f98440a08144c1330445e1e8fb6dc79eecb52af1f5fc0f8f74dc43f09f6fd73a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:052a8fc00b5ce8ba09b5bbde720b31f9a0ccfa644132a43051ac27f88aa84831
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:236375d61c48852c7031f3e21a24dbce93a78667b12168dbb81a89146ae71f0f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:f3f1ac82655e54e9a423a3378716f504c35c30c4434f055a65ab06ded5f7d916
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:5703d8d40435524f966209113893c5decd11e9edd330067d443dce1de2b2509c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:1e33fd7e38fea0af7f794048b51f1e59c1fb6cc3eed4468b1acc12451134afb2
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:faecc9363e97adaef71ecea408d5f62721428d5e143b31fda9807428eba3f926
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:b3d2d20847fe217ba80aabd55fec2985838d6037e7e6523d6649172734d95744
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:0e7cfb571f7a4ef164c45bab280c78402a6ef3ea682284b5d4739f9effff05a6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:2f871958d3f53d0e6bfb21914e0802938af78d42f18a68cd44371ded6bd7a958
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:64eec8f6cc52f89cf715340dab84b1914532deeac40483b59f66c4b9234742e9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:80042fcdec9f300bfbbf76efeabe0d1a57e99372046e3bd40e9ade09a0555684