dhi.io/aspnetcore
ASP.NET Core 9.x
9, 9-debian, 9-debian13, 9.0, 9.0-debian, 9.0-debian13, 9.0.22, 9.0.22-debian, 9.0.22-debian13
sha256:9c7d8d33ead0ea2e786f40c94fe05d96c575f9ecf8f3a84c010ba19e6db3e8f8
Manifest digest:sha256:c8e7a2b588b17c60d1b9f2656fa6a8840568aa1c8d2132288dff0ad39b0c2788
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/aspnetcore:92. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aspnetcore:9 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aspnetcore@sha256:dd9946cc0a88ee626396141024e6255502396858a10ddb4cd0a23586b738fdc9 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aspnetcore@sha256:189d4722600504d16348ce9729702f33f5318cf0884c98858d0cc3bfba4cdb94 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aspnetcore@sha256:2d6005de5ce29772000460f61d2b4931550993dd5f67fcdaf0b235c91c802d6f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aspnetcore@sha256:31f61293111bfb0a528a357d2cc2b9f960f217518fa38464e23bfbc9c0d3be14 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aspnetcore@sha256:c80e28fd5d56ce335190ee4eea4a61b69f5f6759963536f21f3d7de7c4084024 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aspnetcore@sha256:3df057016dac2d61667799e6bc8b60b6968085c1b4bb2d5c06d2ccc2b7253705 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aspnetcore@sha256:7106f2ebd7159cf880cd0b186b82c294e34628ae5712eb1855207348beabc24b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aspnetcore@sha256:258b40656c386d79327376fe12afa2e12e77f8b6c6544335ccea9e9be8462909 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aspnetcore@sha256:f58a91f0a9121dffbfc941f5a685434f069f889b1b4197b1ddd5e9fe01330ea8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aspnetcore@sha256:fb2566d7550c2e89d18d7d7039205ad15d9331607b3dfc9147bf1fdbc894e589 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aspnetcore@sha256:dba4b2a263f44e9898dd15a2954ced591373fd4259e143aac606c98d03ea2446 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aspnetcore@sha256:4dc1ed6cb0f11f0b941f5e3e96dcfbd685e134bd55cb49d812dd0965cb6ff9bf |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aspnetcore@sha256:d7d29d18b2b913d30d770e49afca070073ad29c808d38cc9e4427322aef5063f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aspnetcore@sha256:36ec45e1b14351b4423793e7d867059c8e16831c4cc9dc8baa13ac23f66ef1cb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aspnetcore@sha256:c8aa3ebefe6f63e6a38148c0a0a8870fcaa5057e3f1b43a16551025768890c19 |