dhi.io/aspnetcore
ASP.NET Core 9.x
9, 9-debian, 9-debian13, 9.0, 9.0-debian, 9.0-debian13, 9.0.22, 9.0.22-debian, 9.0.22-debian13
sha256:3fd7462c3d55cbe337be78a85c619460d150e411c99d2651a45d26bf5c9004e3
Manifest digest:sha256:872114522d23f33e1ba3fb4f5668d09fce84fbd8b34a57ba896c2441261949de
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:92. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:9 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:9d9dbd01acd4aea3fb5a77c619f5446d51e060f6647697ef58e9db4f28c23c20 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:bb92e7e8d6b9b5223a53e858a162c2f26c51e686a2a0730de46209aada203b91 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:9682cc850a69ab67305a8ba40a97e4b1cfad12246319662a63b826cc92721438 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:f93f3c3f5911c5746a2661025ab98c2fca433c0f1a1202090ceddf7dcebf184f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aspnetcore@sha256:2cd4162347b05ae4f50ce1682f87c7442a2f51040ba4ec9bc04406c2dda0047f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:6ee453dfe99248fbb919565f7693a967301716d98d4168bdb165e7e4f471d83e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:4f0d0956c2d8096de6f50c6322050aa46f4e53f21b761e300d0ac059369a1618 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:a668ed02ba4782572cb84be8a258e8ac7264f88944c2eed0dbe1c682f51b2633 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:d15df52420f57f66d003c5ebac62ee365aec081db63805785e09a70c5eabfdb7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:e35cca1585da4bc408793283493fb651a17ebc2932c7db7411163d68084f04ad |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:7616d07318e3befd4e60e89a3d62f9a4c3762dfbf75b692679579915bd196696 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:ae1cda3b349837f41d4293c538315ff60119c69da166442a1a2b6313a826242c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:1522e9f38b418871f3f61dafce4c494f175928cc3b8063b5ea71232cad5ad32f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:9648b1a48933e6f9239d50088e102eb8c9788dc1a6b007cbb7859fd7f1ab73d5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:ba7662e80b5510bc60fbd4c4fac808729541f03657350ae9a49017f3aea1e3c0 |