Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.3-debian-fips-dev, 1.31.3-debian13-fips-dev, 1.31.3-fips-dev

Index digest:

sha256:acaf7ff33e31cb58fb352fae6d0903980a8b3e2ebeae1a9ea487dc1eecd902a9

Manifest digest:

sha256:25109b33e44a29c4562e089189d0b7be049ffb6ecc4325b5e85aaa0aafbf3025

Size

93.63 MB

Last pushed

3 hours ago

Vulnerabilities

0
1
0
7
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:ddd0dc083b97fbec59500400f4f3cc16a74463f15b493cfc7c18066c2d68637f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:2afd66fc3d550245eb68bdbecff1e6a4d2c230c36a80c21adaf1a9e957a3d6e3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:cd1f8ba7799ee486b8d84fa2666cd20b4b31981dd375f1f33d8ccdf051d8cab0
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:8d51843c6c1019e8e006576105278330009c02bffad60ba927d3a509faf441e2
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:3a32dd98a1c81793f5814c3c073928924101704a9446fc362c27d5585929be79
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:31d9250f604cb4677ab3833bf686de9832059f6d14e2f47972324703a16db288
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:5907085e1ea8a6a88ddb72f75e1f1c0edbbc787097bc655645c2d68de9d5f31b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:4c4c6e24e24f2b8d2fe4cf3416a05a36d50d09907d81433745e83e336ff11cdc
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:75daac2a2402af4973163485b2952c5d84e202fdacb4ddd95138ba1e3ea063de
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:c93da97e4e9ab51f57c93aae67cbec3b25360f0911255931dc87982dce941334
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:8cec3a44c587c28c4bdf59a5db53c758c48490cfcd9f06ce5ea3493d2ec30bcb
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:762cedfcd7de2650f48ba473d719a79319a6e9901998b5153285ba0ce5725508
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:b33c0645bc0ca56d2b97b970a9ae2b65aafdf864ff838bf95eb5c09efc7f3747
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:52ccbe7d569440b5fb2597fa072eec19ed1e701c1ac750443889e58c532ade86
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:1187bbacdc9691104b03b1e1deaaa25df18395ed788e5dfd84958968512e9f8f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:eaf997dfbf2a41020d6ae10eb2dd7ac63939b14332ce67fdfb6bc88260e8d071
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:3d7496385a4cf196caf69f35571728b8ad146fd1639ee23f7435fa97f936ed51