controls:
- id: SRG-APP-000386-CTR-000920
  levels:
  - medium
  title: {{{ full_name }}} registry must employ a deny-all, permit-by-exception
    (whitelist) policy to allow only authorized container images in the container
    platform.
  status: manual
  rules:
  - rbac_least_privilege
