dhi.io/aspnetcore
ASP.NET Core 8.x (dev)
8-debian-dev, 8-debian13-dev, 8-dev, 8.0-debian-dev, 8.0-debian13-dev, 8.0-dev, 8.0.32-debian-dev, 8.0.32-debian13-dev, 8.0.32-dev
sha256:9a2bd64dab2a6b1572286959a6349ff7074142814a21e489dd1d5bce9aa849b9
Manifest digest:sha256:899ab4cb329d2d6781bb7b8c0eecbd7a48f8a711911b6961bb334922dfb59bc4
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:8-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:8-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:d4d95c5aa4ff24b9c17336f347f010d8340e0447741a150f69e2127c41cf6ee4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:80df5c50aa57d6bd0a8cafaa73c200bdbea628080dfb24b5856bd8187bb5f345 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:c71c69c4745fd4e88609b7ac76bc73980d14a0d41bfc4989b25a0d05c7f45981 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:4ca73e16bd43d633bb75fc8bcf710c5a8a5e76b2688c8e777bbcabde54fcea27 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aspnetcore@sha256:89607da958a0012f05ce6ce07e43cae0b3fdf7d772f296622519486bbb9bab2c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:a1e6e9d89886fba6fd479240927ef5cdfa0b0de206de6ab243cbdc2003cf8504 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:5e838defe1d18eafce96095caef44121073f9d259e6354a8ae91a292c890db77 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:6bf6d1ea0655ccc243522fd8d5651a9d1d5b8e03ea1645d6f6cfb389032211a4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:11391280e522500fa35a4f0d9e50ca8a26254246be240c3b567dc7ba365f4d91 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:80b453aaebd84ddce9982e103072c2da02f38ffadfa48044697243e9ac5bd469 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:fbdda2ed7caa7e73ff6a4f4c35bc6d7968734989c7876206026a876eb3563d3a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:7e822b6fca27f8d0964b2410b9034eba1bb29d2381333b205ae58aec1248b0af |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:a746523963e9433ee7755d94e5a860055b7ad93559d4714c027f3ad41e4f0c14 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:575add6be0f8a0b2565901b7627fb74666348614bf2900b6089e6482439ab8f4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:d082bf86ed898c078c39d46233f4b8176491f869afd96c7dc65406dff662c01c |