dhi.io/temporalio-server
1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.3-debian-fips-dev, 1.31.3-debian13-fips-dev, 1.31.3-fips-dev
sha256:22f67e2cd5a21d03c2d85c7ef81190a09518af1cede5dc3395878b8a23eab3f2
Manifest digest:sha256:f3c42f31ded6ddea3a8c580bb5d77492a27638f9a61f1db40fa2a60f26f573b7
Size
93.63 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/temporalio-server@sha256:9c04b946fabaa33ebaf635cb4e579e19a409fe209fed93a1c8486065a4ef4328 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/temporalio-server@sha256:c191e3dc1604f67b6bd1a5b038181bfdd62afe1a563f7bcbabd1c3564245c432 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/temporalio-server@sha256:131da07cef3d51db4788f17f892747473ceafdff164f13b29e03de8f3a3f1087 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/temporalio-server@sha256:d097d9708f2067b2c16419c8e6fddb95424b33dd9c189e1b9668c56f1a348703 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/temporalio-server@sha256:0a7d6f8ada776e417e0688b71ed968a7aa2215b70f0e985343304d76ee8d3985 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/temporalio-server@sha256:35a8d56eefdf160ef129a45fc7b60055d929b98aea1da29ed6001b1fad6a1def |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/temporalio-server@sha256:962c18c16af654498b290952495a21f04be7ec510ae4985d5389b93f49eae4f8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/temporalio-server@sha256:391df685e9d0b26f2858886cb259ab88577df6932546a688897fa205cf400b2a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/temporalio-server@sha256:786ccd6577cba8fa9e0c47b95c14520f08b3fb97af2f29de668abb37c734bfff |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/temporalio-server@sha256:5836e8cfcf2577579f3f85163550379463f5e331ad6f0b641772a9674e168b70 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/temporalio-server@sha256:79937e6e2e9af3a474c9f0e638b859c7e8d5806a6321fa080f855663113cef40 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/temporalio-server@sha256:f65ec770831519b0e896663f0267a4d404ab5f66f63fa1ea5f1bbc1ecc2a3f31 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/temporalio-server@sha256:73ee24ec610fbeb312256e79c84118a93df5a9f9829f451e8f5a0b90e2ed7c1c |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/temporalio-server@sha256:705ba81126883bdb9d959681879b580c85dfc11f80cb0f48d8a6b8d4be5838ab |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/temporalio-server@sha256:db39bdf9a0d3d3b81ba04f043bab42be3cfdd604d38644e71988ce78920c9f17 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/temporalio-server@sha256:5399f53ed537b4b436b37d4e8775aa1ca098358eee97b7351e09a1cbaace023a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/temporalio-server@sha256:1673de2fc66e6b5af1d108da34f4762e0573d10d7ac8c7d29165cace5dccbb10 |