Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.3-debian-fips-dev, 1.31.3-debian13-fips-dev, 1.31.3-fips-dev

Index digest:

sha256:acaf7ff33e31cb58fb352fae6d0903980a8b3e2ebeae1a9ea487dc1eecd902a9

Manifest digest:

sha256:25109b33e44a29c4562e089189d0b7be049ffb6ecc4325b5e85aaa0aafbf3025

Size

93.63 MB

Last pushed

1 day ago

Vulnerabilities

2
9
0
7
3

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:ddd0dc083b97fbec59500400f4f3cc16a74463f15b493cfc7c18066c2d68637f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:2afd66fc3d550245eb68bdbecff1e6a4d2c230c36a80c21adaf1a9e957a3d6e3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:cd1f8ba7799ee486b8d84fa2666cd20b4b31981dd375f1f33d8ccdf051d8cab0
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:8d51843c6c1019e8e006576105278330009c02bffad60ba927d3a509faf441e2
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:3a32dd98a1c81793f5814c3c073928924101704a9446fc362c27d5585929be79
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:9aa0d2d1730b1106cc499f8b10ad13d665319b8f22800d64c9108bfa6f6690ba
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:96093b654cf0bb3baefbece702a3529060a6c25b0f6fa470699aa198f0a8bf54
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:4c4c6e24e24f2b8d2fe4cf3416a05a36d50d09907d81433745e83e336ff11cdc
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:75daac2a2402af4973163485b2952c5d84e202fdacb4ddd95138ba1e3ea063de
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:c93da97e4e9ab51f57c93aae67cbec3b25360f0911255931dc87982dce941334
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:8cec3a44c587c28c4bdf59a5db53c758c48490cfcd9f06ce5ea3493d2ec30bcb
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:762cedfcd7de2650f48ba473d719a79319a6e9901998b5153285ba0ce5725508
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:03f91721e4ec4ab01c62d9dfd74bb03791991a2cf9a34f06dce0c9d58dcfc970
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:8941a0712e911ea6b4e82457b27a132cae388636a0014835ace2c7350a3e6a1e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:1187bbacdc9691104b03b1e1deaaa25df18395ed788e5dfd84958968512e9f8f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:eaf997dfbf2a41020d6ae10eb2dd7ac63939b14332ce67fdfb6bc88260e8d071
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:2308339b4df3b8e59ffef48b1f2516a73af5b3f3fdf78e4cfd26399d77de6f1b