STIG Profiles
STIG evaluation requires an additional license entitlement. Contact Anchore Customer Success for access and more information.
Anchore publishes updates to its STIG profiles through the Anchore Data Service, separately from Anchore Enterprise and AnchoreCTL releases. Each note below lists the profiles that changed, what changed in their checks, and what to do to get the new results. Notes start with the 2026-10-20 update. For the list of profiles and how to update them, see STIG for Container Images.
Profiles from the Anchore Data Service require Anchore Enterprise v5.23.0 or later and AnchoreCTL v5.23.0 or later. anchorectl stig write-profiles writes the profile directories, profile-inputs.yaml files and metadata.json exactly as they come from the Anchore Data Service, so they are the same for every AnchoreCTL version from v5.23.0.