Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.29.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.29-debian-fips, 1.29-debian13-fips, 1.29-fips, 1.29.7-cli-1.9.1-debian-fips, 1.29.7-cli-1.9.1-debian13-fips, 1.29.7-cli-1.9.1-fips, 1.29.7-debian-fips, 1.29.7-debian13-fips, 1.29.7-fips

Index digest:

sha256:cf9139887dd4ca2fa18c4b1afd553d0561cd57a517544b965754991b3e4d0106

Manifest digest:

sha256:8fd81a6271063f6abfb5b9f83eb62d85b8bd3e4931b6cd215190528d1f153f4f

Size

119.68 MB

Last pushed

14 hours ago

Vulnerabilities

2
4
0
1
2

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.29-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.29-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:668fc10e868e37b155a408225bac178494de5db959b5c16c06ff69d627923ef4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:7601d338eb7de2abe2e96ba83ae782b73b5241338edab788e59080ee7a008462
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:c24037dc5a19950552e7dd76ea3b69199a39a507fbed89bee959ae55fa28d131
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:f0d4e5b77f0f4dab376451e2da621db755f98f47dbf8a658451372220701f280
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:3b842695ede8fb989f010cc5ab145b5e8f8d14b57cc76e9b3a1f8092d560ea16
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:73e09c88de39c3db2fdade86c7fcd1f685ad43bc3d39f0eb34bb3e1309b8d31a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:b276f6a3901957a55b426c5a89d2d59e19e9846f96471b707c0d1c6a44f2a5c8
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:683e97840e42b2ccf385e1d29abf6b8388d74f67cf500cbc0daebd51710880bf
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:cda4d4a6561612b9c59e9f86f73cf3a6daa6ad1feb1ccbefd147942e20ef26d0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:f509931081b0d153fad7798c66677e1183d042c1633abbc8027ccf89e49eec78
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:8fe30a4b4e393162a1fbc5bf10f27996c082c7a0480659a0af8f62fa6dabe4a8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:202f8291ace90b7abcc6372ab9c3471f05cf70b022a21f7910267f9a3b6500f4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:c924e808eecc34e8941db8cc763ab284b21c669af75a9f1368250907f2311613
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:92113a1e688a3c091c0564cf5a56231ac4eb21e2c387491f77a342f9ef5f0361
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:866da526cb385073f731ed3fb78d32016987efff0bc596702f25081376325b44
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:0ee506704bb1638e08bd0d74783386ff32f9febc1293a7458b3140c2410d5541
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:73e258e18d8640fafa1c064a31f92426f2014f2e26f1dae0fd9fa0a90975e7b9