dhi.io/temporalio-server
1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.8-debian-fips, 1.30.8-debian13-fips, 1.30.8-fips
sha256:6de95397bd800e2fd7600f8d5d631df1807133fae2b418a94d2314fe72bf7ce6
Manifest digest:sha256:989be9ed534e8a359d6abf2b420221c56683e585a5e462b54336c49102bdbf52
Size
40.24 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.30-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:48152b49f2120f80f778798cfb905e203181edb1b6e451297c9a64412fb58c4b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:6b11549d2823f745665a56fb5887df593a936dc65a007dc30548cca84da9cd2a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:70d0ee36e4796bb2950e102b8245e7a1dd3c1b4d5ee1e0a43ad31629da3b3129 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:553fd547c835334eef827cb65d59432e27c49a7a3d48053b01edb4ea61696328 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:a3047efd50d7dcc2a4fe2bb07a83ea730d49beda80dd11ba26c21d00e26cfdd5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:720bc114bdf46cbc9793158644b0931c4487bfe91829783d13393bba54fd44c6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:2c4f9a4ad867ba325b39a1c531812c1d16cf940e2abcd86b7777af466becd9db |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:1be20b3c536cf79de7d4970c93e59db7a2341ffc60e868f0b45dde15fbfb463d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:7f379a310ef418995b3fe7e6582760b63ced7d48d4e64aad00393cb529a62ce8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:7b9bcb5dc16122f2f211b5598d725dfab0f84a1392f913f379cfbdd9f5090ad0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:4829c30ef2bdf457905a43ce6a3026b67152661087065e157d88594e1dc7b829 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:82199d1c1dac28b83c0935bd690031891129437e7803d383ef550a3be89ab3b9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:f8a132067c6a58c7ea5c9940ea2fe275dc0cdd7164e39d4043040fd5043b7888 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:1c46103128897d656981fa7f077304eb87b6569dee84964c695feb5d32162f90 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:d1277057589c297d3f12aeee58f35a407b5b51d7813b5f823772f559a5d3343b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:7f1fa7d13d087bc2a33b5e29a60d9f7fbbc545e9f6f47cd6bd0278adac782f9b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:453c7e7d8b64f42b1802dbb2f78370a1fdcb58427d8475e9ff1d565ae59353df |