Sign inSign up
Temporal Server

dhi.io/temporalio-server

Temporal Server 1.29.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.29-debian-fips, 1.29-debian13-fips, 1.29-fips, 1.29.7-cli-1.8.3-debian-fips, 1.29.7-cli-1.8.3-debian13-fips, 1.29.7-cli-1.8.3-fips, 1.29.7-debian-fips, 1.29.7-debian13-fips, 1.29.7-fips

Index digest:

sha256:b4f319d729814b6180e3c478791cf3e012244a6065232a62aedf6083845a6dc4

Manifest digest:

sha256:f77f18a90aff8c469f2d861149efb19f08945b65e33e74ad0b0df1e9e647d550

Size

115.96 MB

Last pushed

11 hours ago

Vulnerabilities

1
1
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/temporalio-server:1.29-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/temporalio-server:1.29-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/temporalio-server@sha256:22b3ed328a4462dff3dc43bb64a7714d14b59f23610ac90a0ff32869b8418c68
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/temporalio-server@sha256:3105b9a7f872c2241891282eab1694d7a4cf581887fe4d03a21c0c5d96505ee0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/temporalio-server@sha256:b3c17a720631e6c9cb8994ea63ef80fd9a55e0db451df4981a624e66096ee121
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/temporalio-server@sha256:fc9724f753d513fc9244b5aa163fe2543617cb847ada343bc7330bab2d74d7e0
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/temporalio-server@sha256:ba531e0761aead7237a24ec9412281f0954d7fb2d932b58b5e37af3cf6f91bb8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/temporalio-server@sha256:abd5e7d584bd9b433be71fc57cbb29f2e3fa53d3772e775ca0c038e31077ca19
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/temporalio-server@sha256:c57f11e44f0f3357de09755d4a90bd2d8727bd9c665c1d2c67011f03b07aea54
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/temporalio-server@sha256:4ef7a6303ba4c5208ae018439e50b6eaf254e952beece83471cb0a6853deb593
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/temporalio-server@sha256:3a13408201e32e7ae4ead2f8c24fd45cb9fff6d8c6553d13eeaecc9e4c3e1fae
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/temporalio-server@sha256:e43622a5bc0540a4a946d0995cdd4a2e418e026fee0d44474af9fcf9aa1a1d36
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/temporalio-server@sha256:9226c028ac270090fe0a64bb5e9fec312b826cd65f80df2e332c018ed7e4babb
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/temporalio-server@sha256:4327b5299b6e67bad9a53da8bcbf936529cad5d48e5c6bf802f9000477a4eb62
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/temporalio-server@sha256:3bd390b6c5e40ba4b2e0ad08c540901c4142bcbe1596db52aa9f7d0dc7fac52a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/temporalio-server@sha256:d67b7b925b90de6a0daccee906f2b90e3b6cc9853072eb99476d4f4dba2abad3
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/temporalio-server@sha256:f3910e4244f15e17d400c2ad352762a6e2cc5bcd628c97f2de3187e66d3f2461
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/temporalio-server@sha256:f88985e8499ed451bf865263e1ae42f7738532dd0df41c7cc080ee9ab9566107
SPDX SBOMhttps://spdx.dev/Documentdhi.io/temporalio-server@sha256:79a484a71142be18eb4d146076be4bab407b7f3f0c2bfe5aa274dc7df420d1f3