dhi.io/aspnetcore
ASP.NET Core 9.x (fips)
9-debian-fips, 9-debian13-fips, 9-fips, 9.0-debian-fips, 9.0-debian13-fips, 9.0-fips, 9.0.22-debian-fips, 9.0.22-debian13-fips, 9.0.22-fips
sha256:c7194ddb943acfe77481b1d83f3bcd7f028dacea76a91b6c2b3bc415d41bc93e
Manifest digest:sha256:adc2174d87a6785f5878c39b8d57134290b06a4e4772f6b2254205d7e4b8d302
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:9-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:9-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:27b1945445a93d5bc3258527ba4ddc9a6fcb9cc3d47a523083a4dfebdd61c2d2 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:66629e44ba9914f6d56670398f91178b379dd9fad9bf79ac55ef8c73217834e5 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/aspnetcore@sha256:30e37b7c206dd2ab3b0b54379347e7a51970c385f09a37f8ad95ff2ab0c22ec5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:478b836f3f4a9ecc4379e21692d1cbceca7ce51ff5b2fa8981976706a5b808a0 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/aspnetcore@sha256:64c16e14781d1e27b5da8f22f2e1be3e9c16355850ed9e7ecca246d28790ee13 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:c19c20a62b28bb82f3d134611c9a5bdb8fcd96bd4e265aad9462b22ea0c75cca |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aspnetcore@sha256:18825faaab23711aa4c65da20ccc39e80e6d20e263095a7130f4a96b1edf9c53 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:13848a6ee920073a844bcadefa5ddc88e8e5499277da179a6176f3227827cc7b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:dc73a754683e140dfc933a94c72d0f7380a997466d08d4845859fb3100c92ecb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:18787dc52f2991e725fc12650374d9e5defd134a139086126d7f76c7c90a7f6a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:459599b8760f082030a457453c9e35e0e27dfd3f2d2866466ee2ffa62a3db404 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:ae49d1204e1bd84e3c75e2763f7607b780e413ccca87e3c8a4c4d467c40a1e35 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:04b5ef8a97f0f7e9dec242478d578ec094278980694c0da22b957419519f3a7e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:bdf0db7abac54e069f1f6b459df34c47fdb07612358ae85e8480dda72427da7e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:8643c65b3cd5cd6681eb6160afe7a48fbd08ae881a439f6a227ab9ff173fc92e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:c6424661fd78699a0281bd02ddd683dbb38befb243e7ac41d42bcbf9bc8adb4d |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:e45a156ef3a463154c749ee8b5050123495eb41f008664f03728441e62e6a772 |