Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.3-debian-fips-dev, 1.31.3-debian13-fips-dev, 1.31.3-fips-dev

Index digest:

sha256:22f67e2cd5a21d03c2d85c7ef81190a09518af1cede5dc3395878b8a23eab3f2

Manifest digest:

sha256:f3c42f31ded6ddea3a8c580bb5d77492a27638f9a61f1db40fa2a60f26f573b7

Size

93.63 MB

Last pushed

3 hours ago

Vulnerabilities

0
1
0
7
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:9c04b946fabaa33ebaf635cb4e579e19a409fe209fed93a1c8486065a4ef4328
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:c191e3dc1604f67b6bd1a5b038181bfdd62afe1a563f7bcbabd1c3564245c432
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:131da07cef3d51db4788f17f892747473ceafdff164f13b29e03de8f3a3f1087
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:d097d9708f2067b2c16419c8e6fddb95424b33dd9c189e1b9668c56f1a348703
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:0a7d6f8ada776e417e0688b71ed968a7aa2215b70f0e985343304d76ee8d3985
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:35a8d56eefdf160ef129a45fc7b60055d929b98aea1da29ed6001b1fad6a1def
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:962c18c16af654498b290952495a21f04be7ec510ae4985d5389b93f49eae4f8
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:391df685e9d0b26f2858886cb259ab88577df6932546a688897fa205cf400b2a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:786ccd6577cba8fa9e0c47b95c14520f08b3fb97af2f29de668abb37c734bfff
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:5836e8cfcf2577579f3f85163550379463f5e331ad6f0b641772a9674e168b70
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:79937e6e2e9af3a474c9f0e638b859c7e8d5806a6321fa080f855663113cef40
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:f65ec770831519b0e896663f0267a4d404ab5f66f63fa1ea5f1bbc1ecc2a3f31
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:73ee24ec610fbeb312256e79c84118a93df5a9f9829f451e8f5a0b90e2ed7c1c
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:705ba81126883bdb9d959681879b580c85dfc11f80cb0f48d8a6b8d4be5838ab
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:db39bdf9a0d3d3b81ba04f043bab42be3cfdd604d38644e71988ce78920c9f17
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:5399f53ed537b4b436b37d4e8775aa1ca098358eee97b7351e09a1cbaace023a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:1673de2fc66e6b5af1d108da34f4762e0573d10d7ac8c7d29165cace5dccbb10