dhi.io/aspnetcore
ASP.NET Core 9.x
9, 9-debian, 9-debian13, 9.0, 9.0-debian, 9.0-debian13, 9.0.23, 9.0.23-debian, 9.0.23-debian13
sha256:c14536c33dcf162bfc249a1ca1bef16dcf64dab6590608807c53d55a9f199adb
Manifest digest:sha256:341ed5ef0aa1fa32cf8e922be08a55a2d49f90b64bdd26c49bf747fd1f508f7a
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:92. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:9 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:e996062f3040ea6f05c5d3d68b65f9ac3268e60cfa26e21e337bb7234e1b49ba |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:ff201b289ad6e0253085a51a778c62257168540e2ee104d31758fc15da7a2918 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:5ac3355c88fa05f2cb9e138db5407231007da3cad6e586091ed1a849c652cad5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:bbb2aa180d8e7cf4f9619d2b87077ea172756f9a715b085c8f8beacd5b4649ef |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aspnetcore@sha256:b17205f9ce7101f3a2e490700d9d3c7c2f38ff62b0f537d92105ef43674c8bea |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:0b986ab1c7dc03004c53a508d0f72d8e17576628720499a209ec5788481b9631 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:ed300ba8b5b06fd768d622ee8b93233ba9f80465d17d06ec6d931e4c89c09bfb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:cf3e0cb19e41fe7bc0087bb835312eb36932d6e31fb92c28926f297f61cc72d7 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:9245fea61cca4d65a53a11a84c176790e4ed4caad8429e64de80db5fffa40ba1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:fab87cf301c614d00af8a6dd7a8ac612a66c1f1d9a9f17d2283c3b5331a2283c |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:fb6880b3b3baa0cbb5bc91e60f7cf0999f781c6028af1bfa074d849b90e67a34 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:0193ce012530906964d5894f1330d1411d926cc1275c8fe0855a3d8828c5f932 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:a6ee1f6ea72b9f886543868c6db92bc01302dcda32ebbec7ce01e37085d3a1bb |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:65d20d493cc1d2e9b6f5ba9ce258af2fe09c5f0ac8f3be02c1be3076bac0a69b |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:4c6878ecf2870bb131a65a95c92c0ae1e1b4c6b6d40bd47a8a58e97221a52354 |