Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.8-debian-fips, 1.30.8-debian13-fips, 1.30.8-fips

Index digest:

sha256:6de95397bd800e2fd7600f8d5d631df1807133fae2b418a94d2314fe72bf7ce6

Manifest digest:

sha256:989be9ed534e8a359d6abf2b420221c56683e585a5e462b54336c49102bdbf52

Size

40.24 MB

Last pushed

4 hours ago

Vulnerabilities

0
1
0
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:48152b49f2120f80f778798cfb905e203181edb1b6e451297c9a64412fb58c4b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:6b11549d2823f745665a56fb5887df593a936dc65a007dc30548cca84da9cd2a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:70d0ee36e4796bb2950e102b8245e7a1dd3c1b4d5ee1e0a43ad31629da3b3129
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:553fd547c835334eef827cb65d59432e27c49a7a3d48053b01edb4ea61696328
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:a3047efd50d7dcc2a4fe2bb07a83ea730d49beda80dd11ba26c21d00e26cfdd5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:720bc114bdf46cbc9793158644b0931c4487bfe91829783d13393bba54fd44c6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:2c4f9a4ad867ba325b39a1c531812c1d16cf940e2abcd86b7777af466becd9db
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:1be20b3c536cf79de7d4970c93e59db7a2341ffc60e868f0b45dde15fbfb463d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:7f379a310ef418995b3fe7e6582760b63ced7d48d4e64aad00393cb529a62ce8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:7b9bcb5dc16122f2f211b5598d725dfab0f84a1392f913f379cfbdd9f5090ad0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:4829c30ef2bdf457905a43ce6a3026b67152661087065e157d88594e1dc7b829
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:82199d1c1dac28b83c0935bd690031891129437e7803d383ef550a3be89ab3b9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:f8a132067c6a58c7ea5c9940ea2fe275dc0cdd7164e39d4043040fd5043b7888
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:1c46103128897d656981fa7f077304eb87b6569dee84964c695feb5d32162f90
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:d1277057589c297d3f12aeee58f35a407b5b51d7813b5f823772f559a5d3343b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:7f1fa7d13d087bc2a33b5e29a60d9f7fbbc545e9f6f47cd6bd0278adac782f9b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:453c7e7d8b64f42b1802dbb2f78370a1fdcb58427d8475e9ff1d565ae59353df