Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips, 1.31-debian13-fips, 1.31-fips, 1.31.4-debian-fips, 1.31.4-debian13-fips, 1.31.4-fips

Index digest:

sha256:52b976593e43a35c8e785e6092b4feea4e6fff898a08a5e80fd6cdc8f61663d0

Manifest digest:

sha256:f5a4b9b56e4b76f2938e6fa5b42c49a1dc3f83d31aaab01ae346323a96b53f57

Size

48.09 MB

Last pushed

23 hours ago

Vulnerabilities

0
1
0
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:f5d53bf85ac6dbf2169a947275aa7b395dd21d26947488db710925285453826e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:e4b5ed68bca1a3fe6c8159912add6e32309c2231f30afe4ad0b4e6cb60574183
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:a3e7a4512d76796a8f8aba53244a60b782c119f52f9f9ee19c786aef7552d502
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:4b2d1d2099448201dd2a367050b1bf670994b127b4d665e54d911c7a1cc8c28d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:bab8dd1d678a8c0653c86c8583ab6e69c76dca32edac2e9f0db8edd2e1860125
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:e5342bece41ee43a78917c698180d5a3b7e1479a92d3deee47f2aa83db801e0e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:945837b630418475c04584a330d5a28e663fcd42f2364a475323560c9a3f8c88
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:be3fe9096f43a2997be5b5f547d025dae5550300a7bb5226f3aa8d2b46c53caf
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:af0f6216dbc09c3dde91a70ae75d486f0ba3ea1becbbc19100a426a7aea6ee0f
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:79247ce3f5941d7115e094723a8b2cb30a25a3128af0cf5d93d06461b4f18dbb
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:0588c02207ccd174f07e2e15fffcf43bcba4f4ef28d6c14d56dae86fa63f5506
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:a42de499ab2d1d120a3aa8dbf74988b4e4e025e1cf3ac4a45823a4fe0f6ceb45
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:9cab99ae8f19b2de8412ae5dade115fd892e6f495fcf47a6570ed0b9c4e0e769
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:bf3138a60abb72ced73bc902c55e9bed8d98db6ee100ef37c20846c535628258
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:cfd17ccd8152ce930cefad65abcbd45930214b2eb9850a43106003508e13f8a6
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:500817e718c708e32e5e37995452d29e40bf06591a4a4e6fd022e1eaf826cf1b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:650a714ef49bdf2a21ff18fa987aa2f14c63420731530424a938d158b2e16f20