Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.28.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.28-debian-fips-dev, 1.28-debian13-fips-dev, 1.28-fips-dev, 1.28.4-cli-1.10.1-debian-fips-dev, 1.28.4-cli-1.10.1-debian13-fips-dev, 1.28.4-cli-1.10.1-fips-dev, 1.28.4-debian-fips-dev, 1.28.4-debian13-fips-dev, 1.28.4-fips-dev

Index digest:

sha256:75d0c61f1d83d7ae8b23628440f14f138353382a148fb2cf1bb2f7ad8e517044

Manifest digest:

sha256:8d17c898ee73fc00714cb07dc57d077bd81df05bf0a1fd524cf168626e9442b2

Size

208.65 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
2
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.28-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.28-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:63837cff944bd9bfd2d7435b13323a33ebf40f842d4fc4ed0e7b3d8d7f29d70b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:10d7f757c80fc134388d93ea6b24795082e1c0a0f31e24637562bfd6368c5565
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:fc8cf3fb932fc320912e4e8aadf9445ce2d17e6982a8c2a7830c7515072d9c54
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:a1b63f5f581430f5653513696abea76f44900d3818da710655cedd6c1771df5d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:2f07ce48308ce97f97ee1aabf9f35c4dbccb199ee5c6d678b10889cf16b8cca9
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:a7a58d3455bbfe591a88bdb0f525f2e29d6ee218f9e953b3670f35773e053999
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:477ef9d42ff3b990e76cf101b71ebd2477d7dd05df90a5186dfd43f05858b67a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:67747e1df606889bb18016228d71ecc1568aa808b716fc6a31e1420902606b98
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:47680c2cce0c697a93515e379e0fff3e18cb4feefdde25317e4f4f17e750c7d0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:364ea264d0c063bc713d7fd30e7c69d31457b059eadd256634cdf1e40e87eedb
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:4daf1b46c8ebae3649c73b90fb6d36cfad3e2d261b516347892082efb5ef85a7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:c9a0400c3a45e05e81ba98609d8c8aaa2137e69d1ed0721bf5c1471398dbc385
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:7c336d56516fe81dc515ba8387794e4544c69ca0795a275c7bcd1c2594a5f23d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:84b8e6278c32acd8b18318a3074ef18d795190db9aafb7c0b33b85b79dd28525
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:94e97b90d0b1c95838fbf4153447f34eb781e74bdf412af634174ca6e60f76b0
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:cb9c4085ddf55542f795453faec8c49805f75da60ded4f7f81d74813fff09506
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:0aec2bba3bd765b7e1ca41f823b15344435b8656312c3875baa383da88c70c73