dhi.io/temporalio-server
1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.3-debian-fips-dev, 1.31.3-debian13-fips-dev, 1.31.3-fips-dev
sha256:76fa69dab00e4c9fd56b9c5e93307b7290797cf92640ec55a880a332ae9a1f1e
Manifest digest:sha256:4a43063157e3e6ba9ca54c36e461f0fe0a67aee93dd17e9c361e5e1c69c4da31
Size
93.55 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:779e6074f7864c1d983e886e85646b92a034a252c82ee535997b3eda3c0f103b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:dd509bc9f1e8a6b490d1c4e069b28a28573c177fce33294f4455c243024be94a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:2ecfbc304a21c0d8e4aecb6d7e013801e318ac24aa94e630a478519a7fa92cf6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:0887b94c081c9b93382fc044d0750a2d2e628759e84c8068f909cd051925dba5 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:fead2f6fd845bcfbe24c1d01328e7b58bdd5357486a2ab5c8ee5f29d2c64bbca |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:737c41d4ccd23a7c2f05174c1f9288a47163077bca44da29c359e5c2c150ca5b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:6fce0a9b9d76a5b505b4ace86d07a05b5a5e8a96fa16ceb78218d17e7d09f4f8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:92ba5f510d2210c5ec16da2208f1ad605b57e57aa9390fab06e3f8830f5426a7 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:108225c18d38167d699b72ae3f168ad277f03a63cd6e84f40b48bb2f72f28ebe |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:5e9b7a2a07822c2c9a54d527f4670181393065a49dc7327d787c4302218a9d09 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:a319ffcb1ca49e3689d13d5a245f9fab68b730b4e6c686a9762283978dd71968 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:d451f185df5939c5ad104b83f51437e17e46d9bce8a330b874d04c925f7c10d3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:98d7a52594263bfc8ab2754f81f2a73e44c0a584102efc703c5647b2024bf44c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:975a706df3c86fb5d83918f945b7813cc56cdf5983e2ceea169d6b5d37797200 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:9d63301c2cf1ee4974041124d9edb5293b469ecd2a11a768b7774cb5f7f923c7 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:078fa5a2b3a01aa4b221b97d2365db2e557e2b64a2d38540782320080acd38e5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:85390bb20ef0f7cf4bc2c10b46f2fcf5d8380ac45bdcba505093985efa720fd3 |