dhi.io/aspnetcore
ASP.NET Core 9.x (dev)
9-debian-dev, 9-debian13-dev, 9-dev, 9.0-debian-dev, 9.0-debian13-dev, 9.0-dev, 9.0.22-debian-dev, 9.0.22-debian13-dev, 9.0.22-dev
sha256:92bfcf09977f79445f0edf67b9acb5b93e760927ab28910038982434a4d27ea1
Manifest digest:sha256:2495ae26d38e7518c2de84db7bb71d28ffef3f17331410030f4a26457f57453e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:9-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:a477e674d57d1df497cc007135b2ba2ff60fd6c637e2938bb332ae86f4873436 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:f3ae916f4e69bab5411a21498e42b1adc55b2e2135eb38a697dde977ce9a5cfa |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:f2613f4a01758e1dfdf062368269bf3317a57ab5f0b6603db6e970a161ed2af4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:fa77406733d3be73079fb61450e75e9f6eec06f960bf96e39df48e98d57a6efd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aspnetcore@sha256:a53501a638d49f836d9639d2a796f240fb49393bfc927a1ac287346ffeb85f1c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:570ecb9943ecb777f7f335af47b66e980ee2f82f219c4c2c2990714456fee458 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:f2aafebd486947604f83d6b0b8a66389fbbbd6a9805fd8d2aab14a09e3f5dd65 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:a3ca7dd0308b66f0adffa379e4b28e488ef19d9dfd12e92b9ebaa32b5ec1f1be |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:6724d170bbb9abf01dbaf9e96e8ebda3627750f6e8cec11a14698511abe5580b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:8e1b20391d497054dfce43e21b6e461ce2a09cfa9ff0dad3b2b6d2534f59736b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:b9e132c6a10019469c47f83b5eede076a75fc3256c6658a57737d8b493712e61 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:a77dba458f782a626281685ef246c21fd92a92d262fe2623ef95374de50c0f9e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:ab3734071cecfd75f3adc40c5586ff8a1e36faf12c804d8858aefeb41134c2b1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:ed79042f877bf331d937ce342a5a5cfc353498fe5cba34c679972e526a62ced7 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:e507cbb24c03b2bbe7c3a500f7893633b4a265fbd2b3502b6758625b5ca1230e |