dhi.io/aspnetcore
ASP.NET Core 9.x (dev)
9-debian-dev, 9-debian13-dev, 9-dev, 9.0-debian-dev, 9.0-debian13-dev, 9.0-dev, 9.0.22-debian-dev, 9.0.22-debian13-dev, 9.0.22-dev
sha256:9e0062837e10c061484f7969f3db213d096ccdba57acdde0c611f460e85b44b7
Manifest digest:sha256:8d64821c47a2d3a826b2e6935152381ec975957e5988c5008f5cece271f34ab3
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:9-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:9-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:bee3fd557daa0ca0021170fa766802adf46d152c51608f679924bfad41c91eaf |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:f832dcf3ab31f468a409fd70ab2e0fd1035fd0f32c1e388faa756eab05d3ffe0 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:29085ee58534408d5ce4bb4c63a95183aa732d3c73c8534eb258ee549be99f48 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:39a648beba306d2e1a997fcc799b464f7d8ac72f565bb68c2601c5e4e843ea50 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aspnetcore@sha256:26c467a86fdc8a9671f12fa5d8864319923a878961df0a107e951666e149aafa |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:01651f3b5458c701a2c91ccdb047150eb03d0cb5ecc630ac7cc0835e6717f3fd |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:bffa9ef4fa98295c4cf3bae4043b8efd5ae96c98e5173898e913dffd64b06032 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:f213b7d4148e711971e0b30c1ae1f7eed73d6e53bdfedfab8f875c851338d1b6 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:c897f8af055cc8ed94c972c6f6537fb940674ee1a4ebf0d384b617197327b08a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:26211b2df061bf79c9d436db42a5193f30bf13ff521fb147e70ed3801947728e |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:6b78c214d4503621a01759d1312f563f9efab05fd9ca27692a949de8398efc05 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:39c20ad58622b98477beb996268f9d93e6442d979067b868e661ff5c694a80d2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:2cf08bd544faabb6b4669dace02b8d5bc103e4cd892576ed087cea10008fdf36 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:2f5392b4e00058b835b007aefc39711f8894b404e7da090438dc784fac9bcc5e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:6cd82dba7353971dfb0e1bacca5fe376ab4b5b38c97a2693ffb240e0c7b091db |