dotnet

.NET runtime for running compiled C# and F# services. Minimal Wolfi base with no shell, signed and SBOM-attested, rebuilt daily against CVE fixes.

Vulnerabilities
Compressed size
65 MB
Architectures
amd64, arm64
Default user
nonroot (65532)
Last built
today

Pull this image

docker pull ghcr.io/rtvkiz/minimal-dotnet:latest
Repository
ghcr.io/rtvkiz/minimal-dotnet
Digest
sha256:096b3f683fd850e1c2616000471cf33ce68342f68911c7fa31e8f79fcc5a7536
Built at
2026-11-12T07:07:40Z
Primary package
dotnet-runtime
Entrypoint
/usr/bin/dotnet
User
nonroot (65532)
Working dir
/app
Architectures
x86_64, aarch64
Environment
DOTNET_CLI_TELEMETRY_OPTOUT=1LANG=C.UTF-8PATH=/usr/bin:/binDOTNET_RUNNING_IN_CONTAINER=true
Labels
org.opencontainers.image.titleminimal-dotnet
org.opencontainers.image.descriptionHardened .NET Runtime image built on Wolfi with daily CVE patches
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/dotnet
org.opencontainers.image.licensesMIT
TagPullPublished
10 ghcr.io/rtvkiz/minimal-dotnet:10 2026-11-12
10.0 ghcr.io/rtvkiz/minimal-dotnet:10.0 2026-11-12
10.0.114-r1 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1 2026-11-12
10.0.114-r1-20261112 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-dotnet:latest 2026-11-12
10-dev ghcr.io/rtvkiz/minimal-dotnet:10-dev 2026-11-12
10.0-dev ghcr.io/rtvkiz/minimal-dotnet:10.0-dev 2026-11-12
10.0.114-r1-20261112-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261112-dev 2026-11-12
10.0.114-r1-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-dotnet:latest-dev 2026-11-12
10.0.114-r1-20261111 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261111 2026-11-11
10.0.114-r1-20261111-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261111-dev 2026-11-11
10.0.114-r1-20261110 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261110 2026-11-10
10.0.114-r1-20261110-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261110-dev 2026-11-10
10.0.114-r1-20261109 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261109 2026-11-09
10.0.114-r1-20261108 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261108 2026-11-08
10.0.114-r1-20261108-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261108-dev 2026-11-08
10.0.114-r1-20261107-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261107-dev 2026-11-07
10.0.114-r1-20261107 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261107 2026-11-07
10.0.114-r1-20261106 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261106 2026-11-06
10.0.114-r1-20261106-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261106-dev 2026-11-06
10.0.114-r1-20261105 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261105 2026-11-05
10.0.114-r1-20261105-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261105-dev 2026-11-05
10.0.114-r1-20261104 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261104 2026-11-04
10.0.114-r1-20261104-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261104-dev 2026-11-04
10.0.114-r1-20261103-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261103-dev 2026-11-03
10.0.114-r1-20261103 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261103 2026-11-03
10.0.114-r1-20261102 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261102 2026-11-02
10.0.114-r1-20261102-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261102-dev 2026-11-02
10.0.114-r1-20261101 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261101 2026-11-01
10.0.114-r1-20261101-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261101-dev 2026-11-01
10.0.114-r1-20261031 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261031 2026-10-31
10.0.114-r1-20261031-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261031-dev 2026-10-31
10.0.114-r1-20261030 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261030 2026-10-30
10.0.114-r1-20261030-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261030-dev 2026-10-30
10.0.114-r1-20261029 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261029 2026-10-29
10.0.114-r1-20261029-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r1-20261029-dev 2026-10-29
10.0.114-r0 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r0 2026-10-28
10.0.114-r0-20261028 ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r0-20261028 2026-10-28
10.0.114-r0-20261028-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r0-20261028-dev 2026-10-28
10.0.114-r0-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.114-r0-dev 2026-10-28
10.0.113-r3-20261027-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r3-20261027-dev 2026-10-27
10.0.113-r3-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r3-dev 2026-10-27
10.0.113-r3 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r3 2026-10-27
10.0.113-r3-20261027 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r3-20261027 2026-10-27
10.0.113-r3-20261026 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r3-20261026 2026-10-26
10.0.113-r3-20261026-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r3-20261026-dev 2026-10-26
10.0.113-r3-20261025-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r3-20261025-dev 2026-10-25
10.0.113-r3-20261025 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r3-20261025 2026-10-25
10.0.113-r2-20261024-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r2-20261024-dev 2026-10-24
10.0.113-r2-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r2-dev 2026-10-24
10.0.113-r2 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r2 2026-10-24
10.0.113-r2-20261024 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r2-20261024 2026-10-24
10.0.113-r1-20261023-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261023-dev 2026-10-23
10.0.113-r1-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-dev 2026-10-23
10.0.113-r1 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1 2026-10-23
10.0.113-r1-20261023 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261023 2026-10-23
10.0.113-r1-20261022-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261022-dev 2026-10-22
10.0.113-r1-20261022 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261022 2026-10-22
10.0.113-r1-20261021-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261021-dev 2026-10-21
10.0.113-r1-20261021 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261021 2026-10-21
10.0.113-r1-20261020-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261020-dev 2026-10-20
10.0.113-r1-20261020 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261020 2026-10-20
10.0.113-r1-20261019 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261019 2026-10-19
10.0.113-r1-20261019-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261019-dev 2026-10-19
10.0.113-r1-20261018 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261018 2026-10-18
10.0.113-r1-20261018-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261018-dev 2026-10-18
10.0.113-r1-20261016 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261016 2026-10-16
10.0.113-r1-20261017 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261017 2026-10-16
10.0.113-r1-20261016-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261016-dev 2026-10-16
10.0.113-r1-20261017-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261017-dev 2026-10-16
10.0.113-r1-20261015 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261015 2026-10-15
10.0.113-r1-20261015-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261015-dev 2026-10-15
10.0.113-r1-20261014 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261014 2026-10-14
10.0.113-r1-20261014-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r1-20261014-dev 2026-10-14
10.0.113-r0 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r0 2026-10-14
10.0.113-r0-20261014 ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r0-20261014 2026-10-14
10.0.113-r0-20261014-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r0-20261014-dev 2026-10-14
10.0.113-r0-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.113-r0-dev 2026-10-14
10.0.112-r5 ghcr.io/rtvkiz/minimal-dotnet:10.0.112-r5 2026-10-14
10.0.112-r5-20261014 ghcr.io/rtvkiz/minimal-dotnet:10.0.112-r5-20261014 2026-10-14
10.0.112-r5-20261014-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.112-r5-20261014-dev 2026-10-14
10.0.112-r5-dev ghcr.io/rtvkiz/minimal-dotnet:10.0.112-r5-dev 2026-10-14

144 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
brotliv1.2.1MIT
brotli.yamlf5ef816d1cb2bd0e165a402c4e8a4c4622464bf3Apache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
dotnetv10.0.114MIT
dotnet-1010.0.114-r1MIT
dotnet-1010.0.114—
dotnet-1010.0.114-r1MIT
dotnet-1010.0.114-r1—
dotnet-10-runtime10.0.114-r1MIT
dotnet-10-runtime10.0.114-r1MIT
dotnet-10-runtime10.0.114-r1—
dotnet-10.yaml671847e306b76c7609fac284df77887501651db5Apache-2.0
e2fsprogsv1.47.4GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
e2fsprogs.yamlb89fefe984e6541788116bd15d4f8dce3dc021a9Apache-2.0
expat.yaml5aeb575ed7ca64fb21dfda042e170d08f1654bbcApache-2.0
gcc.yaml4d188060cbd00821a95f1ef60605da4817e781bbApache-2.0
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16—
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16—
glibc-2.44.yaml69c2b75e0711c38be3c5881e3a141667ccf54341Apache-2.0
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
gnutools/glibc47e2b570410fab606de29f550534a721184852c3LGPL-2.1-or-later
icurelease-79.1MIT
icu79.1-r2MIT
icu79.1-r2MIT
icu79.1-r2—
icu-data6eac2f4d349d9f4a0825103bb41845d8e5ab7addMIT
icu.yamla052d5db0ca3a271debecf012e57ed1e2b3bae06Apache-2.0
icu79-data-full79.1-r2MIT
icu79-data-full79.1-r2MIT
icu79-data-full79.1-r2—
keyutils-libs1.6.3-r41GPL-2.0-or-later OR LGPL-2.0-or-later
keyutils-libs1.6.3-r41(GPL-2.0-or-later OR LGPL-2.0-or-later)
keyutils-libs1.6.3-r41—
keyutils.yaml014624f79627768df6f5ff49f4265a7057c2e206Apache-2.0
krb5krb5-1.22.2-finalMIT
krb5-conf1.0-r10MIT
krb5-conf1.0-r10MIT
krb5-conf1.0-r10—
krb5-conf.yamlf0f4cc5b0d900deaf94dfdcd841e289db97111e1Apache-2.0
krb5-libs1.22.2-r6MIT
krb5-libs1.22.2-r6MIT
krb5-libs1.22.2-r6—
krb5.yamld8c1739b8ac0376433f810660cfe5c19987e66d2Apache-2.0
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16—
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3—
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3—
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3—
libcom_err1.47.4-r5GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
libcom_err1.47.4-r5(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)
libcom_err1.47.4-r5—
libexpatR_2_10_0MIT
libexpat12.10.0-r1MIT
libexpat12.10.0-r1MIT
libexpat12.10.0-r1—
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r3—
libicu7979.1-r2MIT
libicu7979.1-r2MIT
libicu7979.1-r2—
libstdc++16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libstdc++16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libstdc++16.2.0-r3—
libunwind1.8.3-r7MIT
libunwindv1.8.3MIT
libunwind1.8.3-r7MIT
libunwind1.8.3-r7—
libunwind.yamlb02dc524649c535cc6a4ef4a424a667aeaf03922Apache-2.0
libverto0.3.2-r11MIT
libverto0.3.2MIT
libverto0.3.2-r11MIT
libverto0.3.2-r11—
libverto.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxcrypt4.5.2-r8GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r8(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r8—
libxcrypt.yamlb9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518Apache-2.0
lttng-ust2.16.0-r4LGPL-2.1-or-later
lttng-ustv2.16.0LGPL-2.1-or-later
lttng-ust2.16.0-r4LGPL-2.1-or-later
lttng-ust2.16.0-r4—
lttng-ust.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
Microsoft.NETCore.App.Runtime.wolfi.20230201-x6410.0.14—
opensslopenssl-4.1.0Apache-2.0
opensslopenssl-4.0.3Apache-2.0
opensslopenssl-3.6.5Apache-2.0
openssl-3.6-libcrypto3.6.5-r6Apache-2.0
openssl-3.6-libcrypto3.6.5-r6Apache-2.0
openssl-3.6-libcrypto3.6.5-r6—
openssl-3.6-libssl3.6.5-r6Apache-2.0
openssl-3.6-libssl3.6.5-r6Apache-2.0
openssl-3.6-libssl3.6.5-r6—
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8—
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8—
openssl-4.0.yaml53fb2f6751f832fa61ddba06cb8a40dbba5f409fApache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0—
openssl-provider-legacy-allowed.yamlaeae4801330be6fd269d5ed5640dc37b58ccab09Apache-2.0
openssl.yaml106006908276f73e5d13ceca9bc7038ea2d46446Apache-2.0
pub/scm/linux/kernel/git/dhowells/keyutilsv1.6.3GPL-2.0-or-later OR LGPL-2.0-or-later
sha256:501bbf01e67e9f1ae3109406d2e91a0478b8e046353db27fb21bcc3fa6ac518320230201—
sha256:e797feed070fab975d7288583ae5caf76033d53b4f096ed68066ff5d1dadebd2sha256:e797feed070fab975d7288583ae5caf76033d53b4f096ed68066ff5d1dadebd2—
tz2026fCC-PDDC
tzdata2026f-r0CC-PDDC
tzdata2026f-r0CC-PDDC
tzdata2026f-r0—
tzdata.yamlb01ceefc114cf44ccb6d35f405795435f98bf0c2Apache-2.0
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0
xz5.8.4-r1GPL-3.0-or-later
xzv5.8.4GPL-3.0-or-later
xz5.8.4-r1GPL-3.0-or-later
xz5.8.4-r1—
xz.yaml5aeb575ed7ca64fb21dfda042e170d08f1654bbcApache-2.0
zlib1.3.2.1_rc20260921-r2MPL-2.0 AND MIT
zlib767c4c947852e143f582c85f14cf573411df1b35MPL-2.0 AND MIT
zlib1.3.2.1_rc20260921-r2(MPL-2.0 AND MIT)
zlib1.3.2.1_rc20260921-r2—
zlib.yaml5aeb575ed7ca64fb21dfda042e170d08f1654bbcApache-2.0
1 high 0 fixable
CVESeverityPackageInstalledFixed in
CVE-2026-84243 High glibc-2.44 2.44-r16 —

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-dotnet:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-dotnet:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-dotnet:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Languages & Runtimes images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.