Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.8-debian-fips, 1.30.8-debian13-fips, 1.30.8-fips

Index digest:

sha256:182dac726e668afa6307dd3b148b6a1b2d8da68a39cec5d4864b05990902c11b

Manifest digest:

sha256:48acd1146e4f9305c23f635f64a35fcf6a8ae333d7784994bab59935e5f4eaa0

Size

40.24 MB

Last pushed

9 hours ago

Vulnerabilities

0
1
0
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:5fb47cf56a564dc72ad9b6f18c70e3a7c37776042091b351b9a8af1787c39401
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:f9cd5eb5836b35f6ae5a7835fdbbb657dc2bb3a6a2a3df250ddd3d3b697fbf0e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:6b8de8f9e9aaf053b35b09444676de3ef0f3cad67b51efbe49bcc087b3f27e7c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:57a363b72cc0d4eb9293c8da2dcea0bd66d7a951ba357ceac53984d10fe709dd
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:db7c974cc59acce773e87b9ab3cacc72fcc5ba524e03e85fc7717052c941f861
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:9f3e1339f531e96423c71b5e3a955503b8f440a55e7ced80fa229821a19fceb1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:de0c2cb960af67e03b742d135aff72c5564a3a6039fdf54358062120c2c5d1dc
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:7859e38a45823cb7ec7403e50794956aa29d9e823862a15d1880f62f461ce646
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:0719554862bc2f4ed85dfa994a38a1fbab8949ee41567146fe0d64e6171cceab
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:f77e8f29465bfe3fb71e773915b045ae492b338bea9dfdf8103f13307f6c5a8d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:0ba75876a1b84d5c0ae72c9a6b56d8243136564a203e08692e470d5ab3620d49
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:105004482b5695b29d02642426903b459ea0a482d6ac26a8cf2430b048fe2baa
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:f95d1b8a230b387e4d553924edb121e5b5a837445102d0524911c14bf522993e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:136be549fa55c52dc3064d3dc097da2c0331c1c5d821615f9202bde815e0fae6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:afb1988379f8a2e06942f61980bc8b93f68ca12ed58a93a2e6669fb97862619e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:88a076d418917afb497e031f8e49e4dde59f67f8c86bcec63e006298e8b696a4
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:c0f52776de0d56c6182c537d3d1430be7e6a2163caa56e521f9d754957913e74