dhi.io/aspnetcore
ASP.NET Core 8.x (dev)
8-alpine-dev, 8-alpine3.24-dev, 8.0-alpine-dev, 8.0-alpine3.24-dev, 8.0.32-alpine-dev, 8.0.32-alpine3.24-dev
sha256:24105c3916c78e2a1df2fc1c1a2d17b8c604f90a518a9b22ea2fc6c4946ff862
Manifest digest:sha256:9251b412c8c14a307f4d622c831be54eacc5ae86a5a4db533e04c496b2d0f39e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:8-alpine-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:8-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:46360409dc926b1854a4f2717ba7d04b72dc065d5ae5754026a6199083005ca8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:1795c3ca2a990d35f5a5ec0f9c6788b57d74588f1285ba3ebc7a74c012768af9 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:dead387b0ee77cdcacfae93830349c08b0804fbdab0daf3b882fde3e4889aab3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:0d90896531822ef97d43fa5ac5c0798586e6a0494954ee9885d7ecd2efe248fc |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aspnetcore@sha256:71418daf308e73b3b50f1f705289eeeb449263e0189689fb64c95780b347efe6 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:d2cdbcb7cba3ca54695cdc9b1ee1af2ed4dfaaa4af1b95fec6221d5e8842d15e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:13278849c965a4933b0135d87257dd689552b96dd6ad7994c0d75e633ac942d5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:9249d650a82d2595a550b8bf538e87966a13a4e276b1ec077f982d7aa1f1fbf4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:97fdd0a881afef63e052a03a00fb32e31b868d6210b1a04ab0a92a4df8eae221 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:40fddc461c4036e39d8e96469f058375d1fd08d380722d638bae6a595a82a6d9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:9d1cd37d3e705dc5c7179b392bef8073e2c341e8d2aaedfc5a1f62ad4551b8e1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:8e602b558d0ed6ecac9345ef6189b313d3006c42e45db74f4840ae64ff5ab5cb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:7db8f61d709f629e89ebf019f5a55cfbea4dee57333320af2fcc216c121c6ea3 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:458b7b98a25fddda741de803cbeec6babec7450fa3fd1269a4686fe6dab2dcf6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:8f0cab9a74077b48fc3d78e8260c9e45752062dbf117960f64fc040ffddf8db6 |