Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.5-debian-fips-dev, 1.31.5-debian13-fips-dev, 1.31.5-fips-dev

Index digest:

sha256:959723dd45cb65427b20bf4c37b4b309a06ed4aa7b8adab40e62cba0f08158c2

Manifest digest:

sha256:033bae8d905cc230ee205ed39ff8b13593db2074f1c5d4bebb1d6586aec61763

Size

79.81 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
7
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:5d8e41579709c1f0d46ab7e4e33a51b2af2947a3e6430f4e67f1cce0514f4ddb
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:859722765c0bd1badec1006acfcad9792b0406af40f777a2a7858227ded18a23
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:0bd647d52fca879d93278f1ce9f4a5a68ccc86777b1b2ed8667f26d61adcf135
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:12bd7cf8f7f587cd1f7c95e7d83237ec738c3a71858f83ed98afd12a1f082e91
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:d30b3e1aee6a810f80a32f161fdf29e0bb153eee7c788a3e317ec68cc18203db
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:9811333db13cf9fff4cb7f27fa767e0bb505e27a4fb1b57200ea0938f40f91d1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:c850a4446abeb5ec75e3b1a9f21f1af5b05761eb3356b8c2b6432b9d212cde08
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:cedbf18fc841160e0b2dbfac5ec431cd17194a233a440e335b632cea4386aba3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:1598fd29b9ce9718a0eeb84100f58006853e657337710f9e35f0bac7f547b45d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:80096705897bdd39000b25266920320266585b4d553df98ab49d0a83aef7ffc7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:1f2fde0a67067060a9c88280021bb000966fe89ee55d449720a71dfc77100e72
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:8d5fbe2e290dd6a85f8a14e0a2618a2c7270b6832e8e1316d05ae677c1ca1b1a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:c329b1fa181274dd7f67fa88ea3545cb3e2e331690ea70cc7cf414b77e0c4a8d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:47ba50c30ca82376360f69eca41208f402aeed2703088dbf805924cc17e3dbb7
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:ae7c3973af2a144132cb907929f8130ae94e5f62770b5080c083abe457acc6b3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:211739572d741ab5d4a12477719e529b346f87831dec60a51046f83465053c34
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:d1a2374cbf32d95278b19293dd3cf341c6dd3670935a76332979235a37a32e3e