dhi.io/aspnetcore
ASP.NET Core 8.x (fips, dev)
8-alpine3.23-fips-dev, 8.0-alpine3.23-fips-dev, 8.0.33-alpine3.23-fips-dev
sha256:38569b1a27960c8b4fd2183370be1aa42a15588ef950c7df499ef23b729ac012
Manifest digest:sha256:3ea8f28776f27d491fa14a1408b2e8a3acf46c4472fe870a429cf8e244ff6b7e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:8-alpine3.23-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:8-alpine3.23-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:623e26064a79553b3660142e295ea6c037e1dfd4b40cc1792b1154609d2d748e |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:394d041414695dcf02db1afbfa673fc06a59a0ac6be603ed933ecbee859de073 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/aspnetcore@sha256:1ef0adcfd28e3da8855c6a0b0686551c899cc49f17891aca7b62f2e57332fadb |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:530413f99e289d5ccdf758aa52927e7445e69d4bc4c9ba23bc2dccf5d37083b0 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/aspnetcore@sha256:335cf0ff6bf4817f8ea188df05a7774a4d876d4887245af8f3ce8d40ebc7c013 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:ff5818fa6efda04e36b03cd12ea257f612205179db736b9e598c0dc2b22bf828 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:aa608c79137d1cb18ffe9ae2cf92c3bef1dc5b8c8f77600c7c4804b0b7e87977 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:d66616cbbae7af1cb6bb9414be2320cd5ec43e7da42c293f9d9f70430d4e3485 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:0e6b8f703364ed776382b89fb257a24fe0479005dbcaf019e60dd1affec677e7 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:4cdff96d572874317bfe62af03b603c12854a3cf8e566b5f424841daacb21c02 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:2465a6aa2793d3051e8562850155086328fcbc433ad1c6421b211bd41535c658 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:81426521ef42d00c28ec6f33ab83d034a0e2212e1ea97d23ca047cb2e15181c3 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:bf8652c70c6c9de8183e77803516c7753873ca3f8111a91dbf9312ff1db77f83 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:6d46b7cdc1b55f429eb36c9226fcbabd3bcc10bdddda2e146f0f9aed57fb830d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:007dcf303e8934e45353e6e64415f1cef7221e8339699e0c1e2e454255df75aa |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:14fd5b09c44f2d0e8e2e1f94ca70291253ce09c09d820f302d3099fd0e7e5e2e |