Steps

  1. Pull the fully qualified image and record its digest.
  2. Inspect its metadata and list containers that reference it.
  3. Remove it only when no needed container uses it.

Verify and recover

The image is absent only if removal was intentional. If a dependent workload is found, leave both the workload and image unchanged; do not force deletion.