dhi.io/aspnetcore
ASP.NET Core 8.x (dev)
8-debian-dev, 8-debian13-dev, 8-dev, 8.0-debian-dev, 8.0-debian13-dev, 8.0-dev, 8.0.34-debian-dev, 8.0.34-debian13-dev, 8.0.34-dev
sha256:d2b5ba9cd87889b9efd34f294ef0684ecbf9c27b9dabce3252aae50106e6a7db
Manifest digest:sha256:e651e281e6c72baa0990e260cac3386933ee178cdc5d4af5a79cb996b89b1e01
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:8-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:8-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:12780af4bdeff30508eb4478b9df2c902b89b2b2123c077328f349d83b9e1e2a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:61298023c51947a53bb834521ca5303580dfe70b9ec68c437de0ec5849d5f72d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:d557915e568a2b61c150d3e788f0fa53dfc66fe940ece631230feaf85b18aa70 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:b6d24e1016ad031d239b6bab1b5ae055d3ab561d96ddd3ba416fb102d207b641 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aspnetcore@sha256:00532e7d29c91bcf16581c423aeb489c68ce64d7d4e88a58342b0d2778506fb2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:9de25a14434d7478e58dc998793859188046207e184c0725ccab99337f4f46f0 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:535874ff8b0c58874832a8cbfc8e23f712f1b290ff61dbd489c231b8b8d69903 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:f402d01b9863d37f2d099e36d97e5f89a058c833147d7277ca54d12e3da26946 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:232e670fe4ca657ed4ff409b077c3bf5d736f45a89ad55ca91b1de2dc8826053 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:509f760ea2c4749182ceb6fe8a78f859bb984fb76b07fba9f3e602612b153f58 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:6d7962b1cc6b08e43cd24811c0cb231d01645cf63aa2dfcf9dcffc2612123c46 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:f9afec1b261bdaf0a7ed1a1a0f036f86daed3319afdbf276805cc2734081212d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:5a9638dc57884acbd614d3f049921da4d0dac8e6e4f4ae7237af4bee6b466de5 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:94267d150e9993f4f90d40cce48e6eb2b774da2b23041b39c446eb2877458ab0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:510c37ae05591a99be3c50cffd60349cab14983af463b4673701247d4ffff6b3 |