microsoft/dotnet-framework-docker

Remove installation of .NET 5 runtime in SDK images

mthalman opened this issue · 0 comments

mthalman commented

.NET 5 was EOL in May 2022 but is still contained in the sdk images:

dotnet-framework-docker/src/sdk/4.8/windowsservercore-ltsc2022/Dockerfile

Line 36 in 678a955

--add Microsoft.NetCore.Component.Runtime.5.0 ^ `

This is showing up in image scanning results: EOL/Obsolete Software: Microsoft .Net Core Version 5 Detected.

This version of the runtime should be removed to ensure that the images only contain supported software.