Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.8-debian-fips, 1.30.8-debian13-fips, 1.30.8-fips

Index digest:

sha256:6c4d50d0013e77f47227fa128ce117b171f4331a8e3d007af0e9a706893f0e92

Manifest digest:

sha256:66e0c99468da49f45ce86cd1ea529be18248e2ad143e5884ae183da163649ce0

Size

40.24 MB

Last pushed

16 hours ago

Vulnerabilities

0
1
0
3
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:19c7c381e607bcdfd7ec946e3a2e930a813a55c3d10fa5fb950956f03395db0c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:7ffcae4c9053b356315fc6cad55f380507127488cf40c5dcdb744c98b494f6e0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:3aee10119e91d75c4b4b315a8f7fdee9cefe4342856ee197c8847b8687e64b7d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:0599314cda3795d036ea529c936de64b42dba9961946bb0aa8cb9a334627f013
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:a7d6911faf5e008655a5d84235d954888836c2a51080c2831c1759a113d221f8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:26a88dd39da091008578a88c65c35234b7dc5b180c211e490c8a24eaccf14443
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:bbbf7ce55bcff20eb515af6dd9bb7525988771a520ed4a0005fde390a372351a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:7fd2a8eb909743e7d18097a3358f00be72e5160771a6542e2812fb6d33974a15
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:0414cc7bc23748931452818c1fbf23bbf01ad1965a97b5af73916ab9ad752249
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:828cc672320787ad4b0a0fb095384871e25f5b5c59995855ceded1d66bd4f0c5
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:cd235c92f09805262fe0775bb3e3cd8d28685047e884b374c4d553fbb2fb2ca4
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:cad56c6e00d6c97026d7e682422414a4ed28e192e88469fdc3c90cc84d0d7f60
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:3120a106ebf3f1874a1d1666421df55078151ccf41a66e43ad4e89e01479889f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:7cf7a8a0b3994487c9197fb096eb04c61c757b8f989b23363340d93ba9cb728b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:d2bfa3f2904a64893aaa447ecef0e8ad5d12a55147395127a5e05223ee2c57ca
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:427859e6ef9163d379a8ad3072f0dbe2881b286850e69afde149550ed362d933
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:0ddb424603e0c13c64b1b303778289f3b58b6feeb4c9fc5f1711bfff4de569e2