Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.7-debian-fips, 1.30.7-debian13-fips, 1.30.7-fips

Index digest:

sha256:99d233579f36728852198cc5d6a313bcacb8efe5534ffd15b3af78dd8d6fdd1d

Manifest digest:

sha256:8baa32fa167e62fe262aa7fb384d5df264e52d6aee1aa08914224cf13e6a3454

Size

40.22 MB

Last pushed

5 hours ago

Vulnerabilities

0
1
0
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:caf12a995406fbab88782914529c6d517dd2e13408f4300afe76c0aa5b7da727
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:40cf7c22c204f41800cf98de9ec78fb5611da1ec99f3746578417a924be98bc0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:4b364ee38268266b092a647d041461e7e82a7c7371d0bfc9104425cf0b3da691
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:c4a350b576f2a93e1e417de4c89c8c9f8dc492747085c2a5a90614cb10b6bfc7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:1053c9cda2a5c0527c1ce683cbd960866e2501078ccb51d8d907578cdeddd7b4
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:33c1ba8b95890bf0aa982a9e54747d8330cc7c8d6e2ecf78d0f91428cbc71234
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:b99b004c92fef1d7293d7649799b8efc94d6aa295572116d71bf3c475404e549
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:db2c6010d2d600bda664e666a6c49a8d7a8b9d85c0eab849b31c2e9f8dc2cc8e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:7e5e7316f0995681bbd61a89527495f8bb02c72b151b049d1c7cdff11b833c8f
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:91fe8741b6f9faae4e97b8115e648070bf7432206f514da1b1628197fce696f9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:996c42522ad402e67f649ee056b7d0822a90e2d83bd884630c90ed1197de3926
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:22cf61347a659929634046f0f6a5d5a670e7b29dce4145296555a06b71b9b692
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:a75f2c67914015446c249cb3078bd88f9d1cdac76b7a8d1c4bd3a458532589d3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:94cc2d4e768869827ed9e90831a1f123e0d474dacd73b776f4689ce0d0a70de1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:269f5ae5e72335e35c1e8e489b3f69097b01ae2efcf038b08a9359791516b547
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:043cf17fa2660818926630a75534232a2dbdfff32ddb7ccc5df8e20e44532637
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:ddcecdb8d6b7b14f03136a13aacbf1d38455a527f2b812eda2eab6d5d3a14391