Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.9-debian-fips, 1.30.9-debian13-fips, 1.30.9-fips

Index digest:

sha256:ea451d7aabf8a8b4a458250f0b8312c8e4396b8684cd79f86bcea56a1310b7ba

Manifest digest:

sha256:7169d31009b5831f7bc08ac8249d254feb3a564f89a04462ac1d84817417c441

Size

40.24 MB

Last pushed

51 minutes ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.30-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:dfa3ad35ee7ac774f8342d34e476852618fb68d80c6f9ba4ae35fa4064ffe702
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:31325855cbe776f228e7a40c25bec5d29abcc6bf7a81ebd03627974cdacacdcb
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:cb8f4cf5e223d6261ef95748d8ba5de796cf1a177bca112bb17ac240e357ce3c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:9da4e5cefb739f70fcbebb5e90426913ed2f0b243f35973a84076f0a5899fc46
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:3fffce62e337da721c8b760d59a8e74b4f07e4084a83d4544166a5a20ab789d9
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:778a04e8f5b8b0d229906192ac9842f6b3086288d6d9e3d87f517cdab74f56a5
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:17870f5ed7ecff21d29e636531152a393dc2790181a27ba607a8f1509129dea8
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:fd94e5040f2915c9bdafc659058819d6a8323dc792ab115b9d0be3727c9c2a04
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:376a351d76e013cf4cd8dabaaf636f83f22796c2117d997a7dc6d923218f5e4d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:dfb9c8886d920ca2314d982812f9993e7f2210a80e848dd04efb0e507b2f195d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:77e37eb0388a1cfb8c30afcea7df766d116d10dedc72aa5dbe654a0e6e7a7d11
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:baa03f1f8e7eab85e5a49bd23a1e048fb8a00759f24c8597f20258d54112cf33
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:673b853c69d64453526b1ddfbe72bc9f67fb20380776bdc5947d4111b02b4b28
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:30152189245eb6dee79e0bbc5d6647354a2b000e721c55197203c9149707bda3
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:1561f268aea6b0883eb9272a0196ed653792f7d1b8ff406dbfd39da80a6dff69
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:94f1b59ea10ae03d350a5250cce0c3a46db9447f2aa78c972cdf591f9f655242
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:1a6789409a5084365919a357bc153152a91d26a4ca479350b7b94fb29437b45e