Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.8-debian-fips, 1.30.8-debian13-fips, 1.30.8-fips

Index digest:

sha256:9b897b504ec479915a2373e37b938596461482949e72ff16eee23bcfd48f44f1

Manifest digest:

sha256:efb55bbae357fe10ca74bf336e708e6d3f7db04cddd0af85ece5e0a1b61e84ad

Size

40.24 MB

Last pushed

15 hours ago

Vulnerabilities

0
1
0
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:24f3d71929a04e8f003fd6637fe9aa943c77425b823b5aab31f6a9f70deb6c4e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:9488ab2d2dd6e421a06e69abe115a141806121692b82f5e4bcce86d22bd1d5b5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:ebd1a1f5c7a67090e83211ad378e792fecea4980f82e1d15af5f453c2005369f
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:d19ea6479ae74ee9d81d772cf6f5dd67e7067d791e8aa45be913d980bc7d3d0e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:27d55510566c11f36aae81c92a68342f02d2cde841b2c606f8f0bbc632d9e660
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:d5c2fc574db0c38a110764c81a78daddf5cf6b3ddf1a698e1af5be8b4cccb797
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:0d341b4e8329740b07c079f8d1ba97261138c62d9df18aff3d6c41d7822e32e3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:e7d862fad7e5b046a098b9e854d672b0c5cd40eccc05170c3ee04f18b6b287f9
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:b3ad379622ce53eaf1ee11fa5b4d65d4f37d82a16fd9f5bd23d57eba5cf9a0da
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:f78990f9315ff93b60a448fbc20b0ad3db1c148c4050390d55d481a06536249c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:8584c33136c7512fd399a915e7009974517fa9430268cd56f43b6c06ff998237
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:8af0454592f2e31435240e4b4f0b18ab229204da7ef635234801c7f7f5d4acf7
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:eef02afefe7e6f728e834583f84ffd4dd3578ee594f490f385dbbf7e200b0cdd
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:6ba0e9f46d633a56b1c0e77aaaf6b55cf28b580c9c558171b7efc8b04a08a2b8
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:042d8b97ab9dd1d103f0128c5b6794220b2999306f782aefc91c81c315ad686e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:d78df0d8feb72f5cce3b9a30d953f474e45ed94180dd68d769b96a47100d6f4c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:f9620033c8da263ac5711d3fce52116638eb6903799c6daa581fc092fdc680b5