dhi.io/aspnetcore
ASP.NET Core 8.x (fips, dev)
8-alpine3.23-fips-dev, 8.0-alpine3.23-fips-dev, 8.0.33-alpine3.23-fips-dev
sha256:d0966573fc9feb511cfcad79baf93f5d91426e389a71f07377f89c8286ad5b3d
Manifest digest:sha256:e81d30a69d92cbe4e83000c940a924f4f0c0314a475536c2773ec47336919913
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:8-alpine3.23-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:8-alpine3.23-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:4010d4def16742a2fa29d2f65f9fa838dc2ebfb5f33044450588fbea02e7aee4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:7efb5d74a04fd93e9ffd1bb33a7e6056b5c1a6017e6a8ce5c18b5203e5c02656 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/aspnetcore@sha256:80febe49c98a6dbca1d0f75428b3f1e153ba49fb02a9976db6d8ffe3d3a5d10f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:c0f2defb2ab9320992285c3e8086b24ccc8ded8a65befc740173a92a84f5e649 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/aspnetcore@sha256:5ac957bffd34a7f306862f2c94e9470bf1aa9a393baac328eb45c91d3871e18b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:10112ee00fe612367533caa67f9ba229f45d1b9e60ae8d335a7b69707eb9e863 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:e36f1b46633a46c9700063daeb0dfb7602a8a205e418001fc368a8d12c5b7ec6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:cb1f7c125d4cc07c2e3139c1cd8c20fb9323bd21bd53290e8864ac432e8778f9 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:b6a7bde94f7fe0c368371e28966089c423228419baab06318cd6799dc7e336bb |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:036622e82039cf2816ccf6857ecde3f2506e836be5e3d2a9b7cab67c97af276e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:b89dcb1970135be5fae83d40511d24cf0d4a9788383f1f71a3f4bd28e2f5f156 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:7991072c0c339372b7ab8c0daf9c73911a64e0495248a4a8e95eb93db39b2a6a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:44fede653b6a6e8c76bb6bee38a3018bf442367aad90b3871f1abd4b2f45fb88 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:144073caa5ee1b77a53735cf95b64ef043ed33f90e472a36269151057e8f84cb |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:a7a14be185e2ad61acff6fd3e3216e3bd77ed71483636fe5e92f2516cf9f046a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:fbe75ebb50627460262846ab645711c181ea83b8ec71dcd2a13235980b4f123a |