Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.3-debian-fips-dev, 1.31.3-debian13-fips-dev, 1.31.3-fips-dev

Index digest:

sha256:76fa69dab00e4c9fd56b9c5e93307b7290797cf92640ec55a880a332ae9a1f1e

Manifest digest:

sha256:4a43063157e3e6ba9ca54c36e461f0fe0a67aee93dd17e9c361e5e1c69c4da31

Size

93.55 MB

Last pushed

3 hours ago

Vulnerabilities

0
2
0
13
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:779e6074f7864c1d983e886e85646b92a034a252c82ee535997b3eda3c0f103b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:dd509bc9f1e8a6b490d1c4e069b28a28573c177fce33294f4455c243024be94a
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:2ecfbc304a21c0d8e4aecb6d7e013801e318ac24aa94e630a478519a7fa92cf6
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:0887b94c081c9b93382fc044d0750a2d2e628759e84c8068f909cd051925dba5
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:fead2f6fd845bcfbe24c1d01328e7b58bdd5357486a2ab5c8ee5f29d2c64bbca
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:737c41d4ccd23a7c2f05174c1f9288a47163077bca44da29c359e5c2c150ca5b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:6fce0a9b9d76a5b505b4ace86d07a05b5a5e8a96fa16ceb78218d17e7d09f4f8
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:92ba5f510d2210c5ec16da2208f1ad605b57e57aa9390fab06e3f8830f5426a7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:108225c18d38167d699b72ae3f168ad277f03a63cd6e84f40b48bb2f72f28ebe
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:5e9b7a2a07822c2c9a54d527f4670181393065a49dc7327d787c4302218a9d09
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:a319ffcb1ca49e3689d13d5a245f9fab68b730b4e6c686a9762283978dd71968
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:d451f185df5939c5ad104b83f51437e17e46d9bce8a330b874d04c925f7c10d3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:98d7a52594263bfc8ab2754f81f2a73e44c0a584102efc703c5647b2024bf44c
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:975a706df3c86fb5d83918f945b7813cc56cdf5983e2ceea169d6b5d37797200
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:9d63301c2cf1ee4974041124d9edb5293b469ecd2a11a768b7774cb5f7f923c7
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:078fa5a2b3a01aa4b221b97d2365db2e557e2b64a2d38540782320080acd38e5
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:85390bb20ef0f7cf4bc2c10b46f2fcf5d8380ac45bdcba505093985efa720fd3