Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
MKE must only run signed images.
Description
Discussion Text
Controlling the sources where container images can be pulled from allows the organization to define what software can be run within MKE. Allowing any container image to be introduced and instantiated within MKE may introduce malicious code and vulnerabilities to the platform and the hosting system.
MKE registry must deny all container images except for those signed by organizational-approved sources.
MKE registry must deny all container images except for those signed by organizational-approved sources.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.