dhi.io/temporalio-server
1.31-debian-fips, 1.31-debian13-fips, 1.31-fips, 1.31.4-debian-fips, 1.31.4-debian13-fips, 1.31.4-fips
sha256:10c7efaa106e2a6fdb8f3bd0e55f112f44f137cfeb72cacc4c7e76a122acafe8
Manifest digest:sha256:d042690aa7a69e64da72b8da7f823e92ab570e341f9b751a044942ce92b59e65
Size
48.09 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.31-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.31-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:862f371b5adebb284740373dd6973d7ff1444a534c45d7ea939bdf0747d36db4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:0cdc0cd64bc405ab5eb3952ec37667245aba392d1f46352893651c5e943dfcda |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:a88a4e376bea6ee8390597fe587674685004c09f113d2157a4b67c197557b96c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:5a0a9c9e2734bbb82d29bdcb5f540e15a010f76980d78c7668ec42e638c70834 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:63f38b297ad023e0d5e2dcf7927d0f9ea5a7d6ba25e527e1ff6a83f5833f4b21 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:13807d3495d5c1c6ffefc3e4d69b8bd520acb53eefc5ef771adc400c83dbdf95 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:95ba1b5172f4fbc5b07d90bc7a166fc0fa4e81b44a2c8a9f4df297da90dd8f0d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:75f34edb74362a08fd5dfddaa0afb69b3bdeb34c1a793f8426997d6772615eac |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:ac920d4af7132da5fde25520440a4571558c2007b0cd32e5e9bf5cd7dff785da |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:ab037910b932295b42977eada26852e3df7707a32d148dee678cf56b23ce35a9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:1aef8cfba5949bb10647c9da42640027da4672d4ff38a58c2a385178389dcea0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:ad545ee030fd1159d2a05e4a924386ab818007ab94367a6092b70047e8a2c4d7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:7aeac467f756e26b1f11e364a8562e7c7b76bfca4e2b0c50f4479a5a25982f37 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:de5ec53f88438dff433318a7de0f414bce8df0e610ab22c93b6e2b2e103e7aeb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:64783bd6cbb6e760bdd1df4e2bf176c4557b546a7c602b236ff4ce3dcfe5501d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:e00aaa8a642aeaf55f084cb38e1daff3c6d53bb77de9d8d8d369fc0c37239156 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:17149cd2a02762a4bf4402e29c13cabd9c7b0dcc3ef844e3c06b1309354d10de |