Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.8-debian-fips, 1.30.8-debian13-fips, 1.30.8-fips

Index digest:

sha256:b2415ac76cb9a731dd861e103d87819eb9fd626a99145cdc4fbf91fbe4bbfdb0

Manifest digest:

sha256:97926dff2a07736c3b0b6031d76150fd7abe00ed3edef2eb8f0bc251aac0744e

Size

40.24 MB

Last pushed

8 hours ago

Vulnerabilities

0
1
0
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:d8936280bfd46edd959bc07afc081e3b9397afce67bba8f54845db4952714a85
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:81e0c7fa6d4624630ce8c7a5409c53f89794ddb4ace285dc4fda96e5bb64f2d8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:72c3b269336c5772b43e7232acb40e4b52885a78cdacfc1f9390bfde3d50d062
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:605b2c3e3b119b21b41c9d501a34c351c9e979e83feb2fe2ec1124da593813d5
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:a147d70b9d6a09902eecac0b5e6b8be11751938fa2bdc6c26f961cd70920d707
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:af78cc1df6ad0e8efe432487be1482775332350f87d3db0c29f2f1f0f4aca400
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:7019c156f8b0b86a167050b7585be2146ff2ad08529dd7a2c8b1e6439e52ff18
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:4f3adf55f9d35da7276549edfa833eff2a5a8097d04f4d2a1dac53518d1156f7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:808b73a9c2c43c32f6580e38253aa8957da6ef8e56028015412e09ed8579ef91
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:bde6ae50bc5c6ec9603aacf383ecba202fcaf4faece5efdbd984ca00f3ab61a1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:fab67d702d13e98786dc2915d365848a3135a316d7d02a6dbc2df59df2d162a0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:45d909ab3daea6620c6b466ca1203e85ae777a9a6e2cfeaa6a063281773f184e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:799b801e8c561b5d9089a119abbf2b280f80a5e21d9b96d6d274bf9ba9c5d994
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:07aa939225fc53aa388439adb72325b41ec45b5f801880ada2daafa336510f0e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:0f2dce2133fddcc7da1b9989270020390423cc30cfb6c65e332af7a1ebbfa31e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:45162d5a81adf8d5d0df8083ac3a587a4754a46d702e4170ac30aa25add26efa
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:dc2a1fa84d6e10e43754403d98248e9b641fb1c921358a804a337ea16a3e38fb