STIG

STIG (Security Technical Implementation Guide) evaluation extends compliance management to formal government security configuration requirements. The STIG engine runs independently of the standard policy pipeline.

In v6, STIG evaluation targets analyzed container images managed within Anchore Enterprise. See STIG for Container Images for the workflow.