Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.3-debian-fips-dev, 1.31.3-debian13-fips-dev, 1.31.3-fips-dev

Index digest:

sha256:86bc4bbad7f5b95ae572a9dea3a0881d2d6438f433a453f367c980b84ef19835

Manifest digest:

sha256:a2c465a48e8e2b48a0ef5bd5dd953e9f57a533a4b94eb36608184ec86d006981

Size

93.64 MB

Last pushed

8 hours ago

Vulnerabilities

2
9
0
7
4

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:a6f5048c523077f33c73ded8423e15df4c7e082f6f561b9eda9643a53f419b65
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:52cadf87ad3f9acbb6f773886632f4ec5453b8f18ee71a80854f4fe6d99e3246
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:8b00e4672fcda7f305bcc6179a0a107cfb4b157fe48f0ab654f454f8fdbecb52
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:b24fd11de87c58b0173b1d01dd59a0c7b57b65e58a6efa306d72e8746277f416
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:04e7cbd6783700f89e59930fb7022f3f46a0047463bf9634815ade75bb57218e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:d830abcfc1df0982fc2874a1f7323b527a61356cbed50ef7af8b07fae31e75c6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:c9500db685faa15cb0c85444f0f4b7e4ec3965b9a44221e217e008c0103359de
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:af6e5a4427a0bccdb9ba6416e40e859739c2dd57edf3b3e953da730021ad43ab
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:dbea0fb489d4e12d2182e81404fe3d8015e987e8819167b721c91e3384398dd7
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:7c0139b2bc54215a5d12e5c154b06c38b55e984b3a1f9272d484eab766aac875
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:4c5be2850d11011508f20ec3391083793b7d2964dd12d80560163b9daccd3aac
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:2fddc4fbc6a880eaa438dd5757e06243c2a2046cf5f46938c9b78b240a29ee46
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:98b25668465da76e75228a0cf489dd04dc9fbc91578e9d9bd076a335de0c9cf7
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:25282a255608204998229ab78d3065b1ab9c280d840f66dd66e66eebec6e7d2e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:2034c5597fc644fa0f3710f1b6306e036a8619236e2bdcc2e0fe407a914fe5ae
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:af77f6e4ba32c86ea556ca136ef667d326bd86637cd1b2abce70d73a73ef59ae
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:fb5f9092563571b36be8e59b3eb9439590862105d397303a5062b59118de4c5e