Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips, 1.31-debian13-fips, 1.31-fips, 1.31.4-debian-fips, 1.31.4-debian13-fips, 1.31.4-fips

Index digest:

sha256:774144d73f5fb35df74c3f40f2f672da10b82b226d721e7895e372066029ce1f

Manifest digest:

sha256:b1eb8b8fbd062520654feac53f94d9168bea43ff7536a55cf22d2a12bb670c39

Size

48.09 MB

Last pushed

9 hours ago

Vulnerabilities

0
1
0
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:412c6446d778e888decefaed567516b6ba27a6bd097ebd4aef4f567db09d9127
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:b11b74f18f8e9de6a71d412360f449643d9f6545aa7375bef8ff749f64f9d6ea
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:2104646c731e983d9ff813e57e6b9014ed1f425f7c02771dfec90aee5a57926c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:6d3d9a077cf474461557a4d6bbc2ada8e1d83c17d32549816df4f8e225daf177
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:929efa85563767f86500821d4f75d8eb2a08dbc60d69a4e8ebc33ad61a3e462f
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:2824c31f9d182b79f96992dd4930ddb7572dd5972c630af042f5aed8fd13c1b0
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:67374774537ccaf36a4fe6c3b984aa6ac0db15dbcf7a5ad9a7205d9d964a90ec
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:a645e9c44ce7f8f32553202f5d0d346073805532f5600e4abd981bbdcf0fcc5b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:dacf7cdff1e230a14017c8c5afdd8934bcfe01db32fb0bc8bb169403500cb6c3
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:250f6b5acbded4e2a76df76c9172e6822455acb1389ec88c0d94a82e8d1cd4a1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:37179782146300a8930761d65019325c624c95201eb5719df409b9a07a08aa5d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:9e35778dd4a8e315acbab002af77643d1319f9f5243cae978ea6d071f057c751
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:b1f8501dc384ef21c821c329038be2c802736a0b9b099856882ad4b1a1075039
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:930c7189cb1e4b62c947579ec95d26d60484c19300c39e9d9ebea8fa31787d9c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:90cf54b66a069f92f496d2dd77e908ca5d28528e8cfe7ddbe9ce86932bd46af3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:368d175db2ca78267c503dc0d6840961c87dfe3096dbf1b5aef6dd49a893fe9b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:7f2128ca3e262688a11a04d6a31f95e2ca7da5e0be20177e75c097950878e18c