Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips, 1.31-debian13-fips, 1.31-fips, 1.31.4-debian-fips, 1.31.4-debian13-fips, 1.31.4-fips

Index digest:

sha256:10c7efaa106e2a6fdb8f3bd0e55f112f44f137cfeb72cacc4c7e76a122acafe8

Manifest digest:

sha256:d042690aa7a69e64da72b8da7f823e92ab570e341f9b751a044942ce92b59e65

Size

48.09 MB

Last pushed

6 hours ago

Vulnerabilities

0
1
0
3
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:862f371b5adebb284740373dd6973d7ff1444a534c45d7ea939bdf0747d36db4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:0cdc0cd64bc405ab5eb3952ec37667245aba392d1f46352893651c5e943dfcda
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:a88a4e376bea6ee8390597fe587674685004c09f113d2157a4b67c197557b96c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:5a0a9c9e2734bbb82d29bdcb5f540e15a010f76980d78c7668ec42e638c70834
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:63f38b297ad023e0d5e2dcf7927d0f9ea5a7d6ba25e527e1ff6a83f5833f4b21
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:13807d3495d5c1c6ffefc3e4d69b8bd520acb53eefc5ef771adc400c83dbdf95
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:95ba1b5172f4fbc5b07d90bc7a166fc0fa4e81b44a2c8a9f4df297da90dd8f0d
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:75f34edb74362a08fd5dfddaa0afb69b3bdeb34c1a793f8426997d6772615eac
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:ac920d4af7132da5fde25520440a4571558c2007b0cd32e5e9bf5cd7dff785da
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:ab037910b932295b42977eada26852e3df7707a32d148dee678cf56b23ce35a9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:1aef8cfba5949bb10647c9da42640027da4672d4ff38a58c2a385178389dcea0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:ad545ee030fd1159d2a05e4a924386ab818007ab94367a6092b70047e8a2c4d7
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:7aeac467f756e26b1f11e364a8562e7c7b76bfca4e2b0c50f4479a5a25982f37
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:de5ec53f88438dff433318a7de0f414bce8df0e610ab22c93b6e2b2e103e7aeb
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:64783bd6cbb6e760bdd1df4e2bf176c4557b546a7c602b236ff4ce3dcfe5501d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:e00aaa8a642aeaf55f084cb38e1daff3c6d53bb77de9d8d8d369fc0c37239156
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:17149cd2a02762a4bf4402e29c13cabd9c7b0dcc3ef844e3c06b1309354d10de