AnchoreCTL Release Notes - Version 6.2.2

Note: AnchoreCTL v6.2.x versions are compatible with Enterprise v6.2.x deployments.

AnchoreCTL now requires Docker Engine v20.10 or later for any operation that talks to a local container daemon. That covers STIG evaluation and the --from docker and --from podman image sources — --from podman reaches Podman through its Docker-compatible API, so the same minimum applies. Analyzing images from a registry does not use a local daemon and is unaffected. Docker Engine releases earlier than v20.10 are no longer supported.

Fixes an issue where anchorectl image check and anchorectl source check never returned control to the shell when a policy evaluation came back as failed. The final [failed] result was printed, but the progress spinner kept running and the command had to be interrupted by hand, which made a failing policy evaluation look like a broken command rather than a result. Both commands now exit normally on a failing evaluation, and the evaluation step is shown as finished instead of still in progress. Running with -q or --fail-based-on-results avoided the hang and is no longer needed as a workaround.

Last modified September 23, 2026