Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.3-debian-fips-dev, 1.31.3-debian13-fips-dev, 1.31.3-fips-dev

Index digest:

sha256:21414120c46a37bcceebe3253724d54771ae0d6d5d37a2868d643ee759980ee9

Manifest digest:

sha256:3102dd629fb5f2774304e10095d00403a61999625e14749a394bc3c13bdb0fef

Size

93.63 MB

Last pushed

12 hours ago

Vulnerabilities

0
1
0
7
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:6fb3879f45671623006ecfc927e11938e7a7e63afb11789f07daf8427ceda3f6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:58a99fcc49e3fa4242e40843484ac0379cb689c5fd31c15970bad12d0b24f8f5
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:8521fe92217c2cb004a22495a0132648463d32b871fb9efc38be2a5e9e1a7da2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:a98ef7e1534047488fa349e707ea5cf0936ba4c855c0b646448565d11b2c6bbd
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:8eb34e7910fba6591f19e9d6cd168e92610f14d5dfd56e47ec11bfdcc437d598
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:291bd4644298e8939f025d7c31536c7b0f220e9c05e5c3ea60c070f962504093
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:ae46b1d695936c51cbe0bcc4f75732df7ab6d80d088c8909ca5e5a5d5034e55f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:3d1beb34a866176dbf4986f046c909ceaad6a54c94c0e4ec767ad79717a56739
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:3fdf0fce8773061e056b151c84a3038f375f3c5419368a1952c43aa22f9f6338
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:75d59139f975a0859739a9d387c44afd0aaaa95d52a09bfd6db96c31ac328eb0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:30b4603bb7b08f72c499435c1b997affaa1d7eafbb30a2345c896a0ab24a66aa
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:1574d45b71e65b0e46a2203814bc39f9e6db64be1b60dc018b4b931a385f6dd2
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:a5b11142fc057f459c97197d738f9376cbc5fe0da46189abe7fe8201e84ad284
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:c01487192ef13e3641f72738eb87d997f681198b66d3f7f81f7577ffd3158f0f
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:2464f31d1c66b877e8ae42be662b4f49f0f363cbdb4ff533f37a721e3e9cec59
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:ab733f5eb1e7d694ed963f1c27cc826e6b343c705d476f946cbb534c3c09ec46
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:95ceaae79f8078f35e44b4bc69b38108ef1e338a62e66ca0ce0641938c367472