Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.31.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.31-debian-fips, 1.31-debian13-fips, 1.31-fips, 1.31.5-debian-fips, 1.31.5-debian13-fips, 1.31.5-fips

Index digest:

sha256:9dad2bd7e26715f6fd508367230f42752dcdd67485dcf2c3adab64effaa19d17

Manifest digest:

sha256:12a13d02fafcd145d5e4d143935eab9219e3ff3a48724e41d3e72c2f6763ae19

Size

41.80 MB

Last pushed

4 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.31-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.31-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:a762cdb0f51602da8e474978e4028013c5347ff3b43907bae7db918faf4aade8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:1d603127f33b72766416442ae94b6a1192a49c60e04b24a43ef693246af95be0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:7e9fc9dff552cb5d567448e34579479b0094c71ec49a8cc7ae93014d8eb56848
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:ae56b151f003116ea15c89b925552002cb63a2b2580dcd4536badf183498a590
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:9c05eb96d92843598a973c641632dbedad89379294a064f240f7b6d5e8572979
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:ed800717fe1087b457d4771af1fbbc4a12ad2ecee61e94f81b57e05fcb7d26c7
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:bd23405ee5715f9c912e0671f2109f7bbab886a0207e92bd6b8e3668ed2c510a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:70656169b096d9e2f4b7317f5108d774dce16eba43ddfaea28168d39b729983d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:c8f2fee0c1a3e03d18e4b017b520f1655128936712f1def8a83cd3205113f80d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:22a2296b7e6212ffb11f0528284b9faaf495547a68edde4d94619797f3f1914e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:4f0184d5a4dbc8aedc450c5a46d6674c3e5d9cc5b58b18d05557782536c3b65e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:74710ba8b02fa38815b0ca1b05c85a8b13077b1e0833d16cd94861ff4ce7f582
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:537c2582d4376579eaefa7ec1a58f3e81f875134bc3e67c2994f2fabc732ae75
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:444e420dfb4f074bc21137a3b3a6fea100085ddcb10069ef1c974fae09393621
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:128f74e06267b4801486de3b19fa821243812e5a84f1822d383fcc62818485c8
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:a24d3c43d2c5a43326519aadaf1f490616c5dc2fdf84600a57e94f56e31a89a8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:255c0d87d378cfc798296a87fb0e1785bc88682fa831c281a0fa2c8330c7988b