temporal-admin-tools

Temporal admin toolbox: tdbg, schema tools for Cassandra, SQL and Elasticsearch, plus the temporal and tctl CLIs. Built from source and signed.

Vulnerabilities
Compressed size
121 MB
Architectures
amd64, arm64
Default user
temporal (1000)
Last built
today
Upstream
temporal.io

Pull this image

docker pull ghcr.io/rtvkiz/minimal-temporal-admin-tools:latest
Repository
ghcr.io/rtvkiz/minimal-temporal-admin-tools
Digest
sha256:7b82df785cfd2241d6d52f2de62bd35c77c6f634594c5ace747e79cc04a6e58d
Built at
2026-11-12T08:01:20Z
Primary package
temporal-admin-tools
Entrypoint
/sbin/tini --
Cmd
sleep infinity
User
temporal (1000)
Working dir
/etc/temporal
Architectures
x86_64, aarch64
Environment
PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/binSSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crtTEMPORAL_HOME=/etc/temporal
Labels
org.opencontainers.image.titleminimal-temporal-admin-tools
org.opencontainers.image.descriptionTemporal admin, schema and CLI tooling, built from source with SLSA provenance.
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/temporal-admin-tools
org.opencontainers.image.licensesMIT
TagPullPublished
1 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1 2026-11-12
1.32 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32 2026-11-12
1.32.2-r0 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0 2026-11-12
1.32.2-r0-20261112 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-temporal-admin-tools:latest 2026-11-12
1-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1-dev 2026-11-12
1.32-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32-dev 2026-11-12
1.32.2-r0-20261112-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261112-dev 2026-11-12
1.32.2-r0-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:latest-dev 2026-11-12
1.32.2-r0-20261111-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261111-dev 2026-11-11
1.32.2-r0-20261111 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261111 2026-11-11
1.32.2-r0-20261110 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261110 2026-11-10
1.32.2-r0-20261110-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261110-dev 2026-11-10
1.32.2-r0-20261109 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261109 2026-11-09
1.32.2-r0-20261109-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261109-dev 2026-11-09
1.32.2-r0-20261108 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261108 2026-11-08
1.32.2-r0-20261108-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261108-dev 2026-11-08
1.32.2-r0-20261107 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261107 2026-11-07
1.32.2-r0-20261107-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261107-dev 2026-11-07
1.32.2-r0-20261106 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261106 2026-11-06
1.32.2-r0-20261106-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261106-dev 2026-11-06
1.32.2-r0-20261105 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261105 2026-11-05
1.32.2-r0-20261105-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.2-r0-20261105-dev 2026-11-05
1.32.1-r0 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0 2026-11-05
1.32.1-r0-20261105 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261105 2026-11-05
1.32.1-r0-20261105-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261105-dev 2026-11-05
1.32.1-r0-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-dev 2026-11-05
1.32.1-r0-20261104-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261104-dev 2026-11-04
1.32.1-r0-20261104 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261104 2026-11-04
1.32.1-r0-20261029 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261029 2026-10-29
1.32.1-r0-20261029-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261029-dev 2026-10-29
1.32.1-r0-20261027 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261027 2026-10-27
1.32.1-r0-20261027-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261027-dev 2026-10-27
1.32.1-r0-20261026 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261026 2026-10-26
1.32.1-r0-20261026-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261026-dev 2026-10-26
1.32.1-r0-20261025 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261025 2026-10-25
1.32.1-r0-20261025-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261025-dev 2026-10-25
1.32.1-r0-20261024 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261024 2026-10-24
1.32.1-r0-20261024-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261024-dev 2026-10-24
1.32.1-r0-20261023 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261023 2026-10-23
1.32.1-r0-20261023-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261023-dev 2026-10-23
1.32.1-r0-20261022 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261022 2026-10-22
1.32.1-r0-20261022-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261022-dev 2026-10-22
1.32.1-r0-20261021 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261021 2026-10-21
1.32.1-r0-20261021-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261021-dev 2026-10-21
1.32.1-r0-20261020 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261020 2026-10-20
1.32.1-r0-20261020-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261020-dev 2026-10-20
1.32.1-r0-20261019 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261019 2026-10-19
1.32.1-r0-20261019-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261019-dev 2026-10-19
1.32.1-r0-20261018 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261018 2026-10-18
1.32.1-r0-20261018-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261018-dev 2026-10-18
1.32.1-r0-20261017 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261017 2026-10-17
1.32.1-r0-20261017-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261017-dev 2026-10-17
1.32.1-r0-20261016 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261016 2026-10-16
1.32.1-r0-20261016-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261016-dev 2026-10-16
1.32.1-r0-20261015 ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261015 2026-10-15
1.32.1-r0-20261015-dev ghcr.io/rtvkiz/minimal-temporal-admin-tools:1.32.1-r0-20261015-dev 2026-10-15

48 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
busybox1.38.0-r3GPL-2.0-only
busybox1.38.0-r3GPL-2.0-only
busybox1.38.0-r3—
busybox_mirror1_38_0GPL-2.0-only
busybox.yaml59d45eb49286129d8d21b2469befa3b55be4719bApache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
gcc.yaml4d188060cbd00821a95f1ef60605da4817e781bbApache-2.0
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16—
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16—
glibc-2.44.yaml69c2b75e0711c38be3c5881e3a141667ccf54341Apache-2.0
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
gnutools/glibc47e2b570410fab606de29f550534a721184852c3LGPL-2.1-or-later
images/temporal-admin-tools/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16—
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16—
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r3—
libxcrypt4.5.2-r8GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r8(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r8—
libxcrypt.yamlb9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518Apache-2.0
sha256:778c5d192a479a5890818870def6ef4db55dba32d319af137f179fb9bf35f41csha256:778c5d192a479a5890818870def6ef4db55dba32d319af137f179fb9bf35f41c—
sha256:d134500b28c8802629bdb6a550d4b2ed9ad8c1e79480641e8d1111e6f0acc1a220230201—
temporal-admin-tools1.32.2-r0MIT
tini0.19.0-r26MIT
tiniv0.19.0MIT
tini0.19.0-r26MIT
tini0.19.0-r26—
tini.yamled6708a41ae306d9a14b1e088a7590c8278a9babApache-2.0
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0
4 critical44 high30 medium9 low 86 fixable
CVESeverityPackageInstalledFixed in
GHSA-p77j-4mvh-x3m3 Critical google.golang.org/grpc v1.56.3 1.79.3
GHSA-p77j-4mvh-x3m3 Critical google.golang.org/grpc v1.56.3 1.79.3
GO-2026-6612 Critical golang.org/x/net v0.35.0 0.60.0
GO-2026-6612 Critical golang.org/x/net v0.35.0 0.60.0
CVE-2026-63772 High github.com/apache/thrift v0.17.0 0.25.0
CVE-2026-63772 High github.com/apache/thrift v0.24.0 0.25.0
CVE-2026-66055 High github.com/apache/thrift v0.17.0 0.25.0
CVE-2026-66055 High github.com/apache/thrift v0.24.0 0.25.0
CVE-2026-82458 High github.com/apache/thrift v0.17.0 0.25.0
CVE-2026-82458 High github.com/apache/thrift v0.24.0 0.25.0
CVE-2026-83663 High github.com/apache/thrift v0.17.0 0.25.0
CVE-2026-83663 High github.com/apache/thrift v0.24.0 0.25.0
CVE-2026-94637 High github.com/apache/thrift v0.17.0 0.25.0
CVE-2026-94637 High github.com/apache/thrift v0.24.0 0.25.0
GHSA-2v4p-qf9q-27wj High google.golang.org/grpc v1.56.3 1.82.2
GHSA-2v4p-qf9q-27wj High google.golang.org/grpc v1.56.3 1.82.2
GHSA-2v4p-qf9q-27wj High google.golang.org/grpc v1.84.0-dev.0.20260723093437-b6eac429d7b6 1.84.0-dev.0.20260825144003-d5a41119e0e3
GHSA-2v4p-qf9q-27wj High google.golang.org/grpc v1.84.0-dev.0.20260723093437-b6eac429d7b6 1.84.0-dev.0.20260825144003-d5a41119e0e3
GHSA-2v4p-qf9q-27wj High google.golang.org/grpc v1.84.0-dev.0.20260723093437-b6eac429d7b6 1.84.0-dev.0.20260825144003-d5a41119e0e3
GHSA-2v4p-qf9q-27wj High google.golang.org/grpc v1.84.0-dev.0.20260723093437-b6eac429d7b6 1.84.0-dev.0.20260825144003-d5a41119e0e3
GHSA-6v2p-p543-phr9 High golang.org/x/oauth2 v0.7.0 0.27.0
GHSA-8wv5-x4w7-5gww High github.com/apache/thrift v0.17.0 0.24.0
GHSA-hrxh-6v49-42gf High google.golang.org/grpc v1.56.3 1.82.1
GHSA-hrxh-6v49-42gf High google.golang.org/grpc v1.56.3 1.82.1
GHSA-vp52-pcj8-j9qc High google.golang.org/grpc v1.56.3 1.83.1
GHSA-vp52-pcj8-j9qc High google.golang.org/grpc v1.56.3 1.83.1
GHSA-wf45-q9ch-q8gh High github.com/apache/thrift v0.17.0 0.23.0
GO-2026-4918 High golang.org/x/net v0.35.0 0.53.0
GO-2026-4918 High golang.org/x/net v0.35.0 0.53.0
GO-2026-5026 High golang.org/x/net v0.35.0 0.55.0
GO-2026-5026 High golang.org/x/net v0.35.0 0.55.0
GO-2026-5942 High golang.org/x/net v0.35.0 0.56.0
GO-2026-5942 High golang.org/x/net v0.35.0 0.56.0
GO-2026-5970 High golang.org/x/text v0.22.0 0.39.0
GO-2026-5970 High golang.org/x/text v0.22.0 0.39.0
GO-2026-6603 High golang.org/x/net v0.35.0 0.60.0
GO-2026-6603 High golang.org/x/net v0.35.0 0.60.0
GO-2026-6610 High golang.org/x/net v0.35.0 0.60.0
GO-2026-6610 High golang.org/x/net v0.35.0 0.60.0
GO-2026-6611 High golang.org/x/net v0.35.0 0.60.0
GO-2026-6611 High golang.org/x/net v0.35.0 0.60.0
GO-2026-6617 High golang.org/x/net v0.35.0 0.60.0
GO-2026-6617 High golang.org/x/net v0.35.0 0.60.0
GO-2026-6629 High golang.org/x/text v0.22.0 0.41.0
GO-2026-6629 High golang.org/x/text v0.22.0 0.41.0
GO-2026-6860 High golang.org/x/net v0.35.0 0.62.0
GO-2026-6860 High golang.org/x/net v0.35.0 0.62.0
GO-2026-6865 High github.com/klauspost/compress v1.18.7 1.20.2
GHSA-246p-cpwv-v3jq Medium github.com/labstack/echo/v4 v4.16.1 —
GHSA-5cv4-jp36-h3mw Medium golang.org/x/net v0.35.0 0.55.0
GHSA-5cv4-jp36-h3mw Medium golang.org/x/net v0.35.0 0.55.0
GHSA-99jh-6h7p-pp36 Medium github.com/labstack/echo/v4 v4.16.1 —
GHSA-hmhp-gh8m-c8xp Medium go.temporal.io/server v1.18.1-0.20230217005328-b313b7f58641 1.27.4
GHSA-p768-c3pr-6459 Medium go.temporal.io/server v1.18.1-0.20230217005328-b313b7f58641 1.26.3
GHSA-p9f8-wvj8-2fg8 Medium go.opentelemetry.io/otel/sdk v1.11.2 1.33.0
GHSA-q98v-9f9w-f49q Medium go.temporal.io/server v1.18.1-0.20230217005328-b313b7f58641 1.28.4
GHSA-qc2q-p7wx-3px3 Medium google.golang.org/grpc v1.56.3 1.83.1
GHSA-qc2q-p7wx-3px3 Medium google.golang.org/grpc v1.56.3 1.83.1
GHSA-qxp5-gwg8-xv66 Medium golang.org/x/net v0.35.0 0.36.0
GHSA-qxp5-gwg8-xv66 Medium golang.org/x/net v0.35.0 0.36.0
GHSA-vvgc-356p-c3xw Medium golang.org/x/net v0.35.0 0.38.0
GHSA-vvgc-356p-c3xw Medium golang.org/x/net v0.35.0 0.38.0
GHSA-w67g-5rqw-f597 Medium github.com/gorilla/websocket v1.5.0 1.5.3
GO-2024-2689 Medium go.temporal.io/server v1.18.1-0.20230217005328-b313b7f58641 1.20.5
GO-2026-4440 Medium golang.org/x/net v0.35.0 0.45.0
GO-2026-4440 Medium golang.org/x/net v0.35.0 0.45.0
GO-2026-4441 Medium golang.org/x/net v0.35.0 0.45.0
GO-2026-4441 Medium golang.org/x/net v0.35.0 0.45.0
GO-2026-5025 Medium golang.org/x/net v0.35.0 0.55.0
GO-2026-5025 Medium golang.org/x/net v0.35.0 0.55.0
GO-2026-5027 Medium golang.org/x/net v0.35.0 0.55.0
GO-2026-5027 Medium golang.org/x/net v0.35.0 0.55.0
GO-2026-5029 Medium golang.org/x/net v0.35.0 0.55.0
GO-2026-5029 Medium golang.org/x/net v0.35.0 0.55.0
GO-2026-5030 Medium golang.org/x/net v0.35.0 0.55.0
GO-2026-5030 Medium golang.org/x/net v0.35.0 0.55.0
GO-2026-6866 Medium golang.org/x/net v0.35.0 0.62.0
GO-2026-6866 Medium golang.org/x/net v0.35.0 0.62.0
GHSA-8wmf-6v46-5gfg Low go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.11.2 1.45.0
GHSA-8wmf-6v46-5gfg Low go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.11.2 1.45.0
GHSA-8wmf-6v46-5gfg Low go.opentelemetry.io/otel/sdk v1.11.2 1.45.0
GHSA-gm2g-2xr9-pxxj Low go.temporal.io/server v1.18.1-0.20230217005328-b313b7f58641 1.20.0
GHSA-q9w6-cwj4-gf4p Low go.temporal.io/api v1.18.1 1.44.1
GHSA-q9w6-cwj4-gf4p Low go.temporal.io/api v1.18.1 1.44.1
GHSA-xpg8-3hhp-p7w8 Low go.temporal.io/server v1.18.1-0.20230217005328-b313b7f58641 1.29.5
GO-2026-5024 Low golang.org/x/sys v0.30.0 0.44.0
GO-2026-5024 Low golang.org/x/sys v0.30.0 0.44.0
GO-2026-5932 Unknown golang.org/x/crypto v0.58.0 0.58.1-0.20261009181718-2f1f834330b2

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-temporal-admin-tools:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-temporal-admin-tools:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-temporal-admin-tools:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Apps images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.