dotnet / dotnet/sdk

Add `sha512` support to .NET SDK Container Builds

Open
#56,089 0 comments 0 reactions 0 assignees View on GitHub
Area-Containers untriaged
Dominant language
C#
Stars
3.2k
Forks
1.3k
PR merge metrics
PR metrics pending

Description

### Is your feature request related to a problem?

Three digest algorithms are defined in the OCI spec: `sha256`, `sha512`, and `blake3`.
Currently, .NET SDK container builds only support images/layer manifests that use `sha256`.

### Describe the solution you'd like

`sha512` support is spotty at the moment. For example, Azure Container Registry doesn't support uploading manifests that use `sha512` digests. Eventually, however, I expect that `sha512` will be supported more broadly among tooling and registries. .NET should not be a blocker here.

### Alternatives you've considered

_No response_

### Additional context

Related: `blake3`, also part of the OCI spec, is blocked on https://github.com/dotnet/runtime/issues/80900.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start in the .NET SDK container-build implementation and trace where OCI image and layer manifests currently assume sha256. Compare the digest handling with the OCI specification, then verify that container builds can support sha512 manifests without blocking existing sha256 behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
build-system
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.