STIGQter: STIG Summary: Red Hat OpenShift Container Platform 4.x Security Technical Implementation Guide Version: 2 Release: 6 Benchmark Date: 01 Jul 2026:

OpenShift must contain only container images for those capabilities being offered by the container platform.

DISA Rule

SV-257538r960963_rule

Vulnerability Number

V-257538

Group Title

SRG-APP-000141-CTR-000320

Rule Version

CNTR-OS-000380

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Remove any images from the container registry that are not required for the functionality of the system by executing the following:

oc delete image <IMAGE_NAME> -n <IMAGE_NAMESPACE>

Check Contents

To review the container images within the container platform registry, execute the following:

oc get images

Review the container platform container images to validate that only container images necessary for the functionality of the information system are present. If unnecessary container images exist, this is a finding.

Vulnerability Number

V-257538

Documentable

False

Rule Version

CNTR-OS-000380

Severity Override Guidance

To review the container images within the container platform registry, execute the following:

oc get images

Review the container platform container images to validate that only container images necessary for the functionality of the information system are present. If unnecessary container images exist, this is a finding.

Check Content Reference

M

Target Key

5547