dhi.io/temporalio-server
1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.4-debian-fips-dev, 1.31.4-debian13-fips-dev, 1.31.4-fips-dev
sha256:edb77a7813af32d2846188250340c42f19efa0edcfa1bb987e160850f181c5fb
Manifest digest:sha256:0dc0f9dfdce4c9e75d8e1e694ab0b7baa853524093d4b1cd98024d9ff2a0efdb
Size
93.65 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:132c21626dc610d3bca88be9bf2d268dd14d5aef2a012a30c054741c6e622d5a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:86580fb52f3525c9202b1e6169a44e69fc7f83c0c626d8b313f4d1ea685a6674 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:05cc98411d0cea309565c77b59a80979d925d36a32f2e371378bb389aa59d5e2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:1f24e1b4d5a2a38a768622c54f27c90aed4368d96acb745f3dd2d9c8acf4022b |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:cac313007ff72f38d51843db772f7eed3d7d7bd397ee810898084d2130207f67 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:bb475a474552d0c069201cc05c625b32d08d1a598891fcf8ac7bc28af6fcf7f6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:dc1041adda71345b1cba78b058a0bc13a952dfe8e92596d8292a09dfc6cc644a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:398a5319cdb344533f3fd656eee844b217df3dac26e695fc7dfc4a88c60c7aab |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:3c11be76b8f465a3653d53735047643b468bae426ab99adc8a14b47327859bbd |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:7ef36256c06e91f5772c8ce0b3741a001503a3c7dd131a0a85ada865d0c4c3c5 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:a1a476bf4e4954f89665f1b27742d222a09f2b2fca86de17d6c564835ca6a098 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:8b59e29144e03c5e42c635c39d2a3e21ade4f30a3ec3124cf5326da9537e0da7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:2b0951e151cdd645ad920c45a3484661a89137d42b2a054b24f623748f4b2732 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:596b0cff8dc052afd9d90fed190f785f3d09e6964551111091da5e7ffb9e2cda |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:4388c9f233e8cd097dd4b0b7099182216958a5cd941742281891c692c1021599 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:c928915e08f183e02b39c4a61e2f43dc22efa1a9c3c624a53ed1f7ed37a03d27 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:109e9ab8658e7436d114714ddb0ac59859717c5b77e53a021a0258fa1f38db57 |