diff --git a/salt/common/tools/sbin/so-image-common b/salt/common/tools/sbin/so-image-common
index f0fd8d691..6f5095aa3 100755
--- a/salt/common/tools/sbin/so-image-common
+++ b/salt/common/tools/sbin/so-image-common
@@ -29,73 +29,80 @@ container_list() {
     fi
 
     if [ $MANAGERCHECK == 'so-import' ]; then
-      TRUSTED_CONTAINERS=( \
-        "so-elasticsearch" \
-        "so-filebeat" \
-        "so-idstools" \
-        "so-kibana" \
-        "so-kratos" \
-        "so-nginx" \
-        "so-pcaptools" \
-        "so-soc" \
-        "so-steno" \
-        "so-suricata" \
-        "so-zeek" )
+      TRUSTED_CONTAINERS=(
+        "so-elasticsearch"
+        "so-filebeat"
+        "so-idstools"
+        "so-kibana"
+        "so-kratos"
+        "so-nginx"
+        "so-pcaptools"
+        "so-soc"
+        "so-steno"
+        "so-suricata"
+        "so-zeek" 
+      )
     elif [ $MANAGERCHECK != 'so-helix' ]; then
-      TRUSTED_CONTAINERS=( \
-        "so-acng" \
-        "so-curator" \
-        "so-domainstats" \
-        "so-elastalert" \
+      TRUSTED_CONTAINERS=(
+        "so-acng"
+        "so-curator"
+        "so-domainstats"
+        "so-elastalert"
+        "so-fleet"
+        "so-fleet-launcher"
+        "so-freqserver"
+        "so-grafana"
+        "so-idstools"
+        "so-influxdb"
+        "so-kratos"
+        "so-minio"
+        "so-mysql"
+        "so-nginx"
+        "so-pcaptools"
+        "so-playbook"
+        "so-redis"
+        "so-soc"
+        "so-soctopus"
+        "so-steno"
+        "so-strelka-backend"
+        "so-strelka-filestream"
+        "so-strelka-frontend"
+        "so-strelka-manager"
+        "so-suricata"
+        "so-telegraf"
+        "so-thehive"
+        "so-thehive-cortex"
+        "so-thehive-es"
+        "so-wazuh"
+        "so-zeek" 
+      )
         if [[ "$FEATURESCHECK" == "True" ]]; then
-          "so-elasticsearch-features" \
-          "so-filebeat-features" \
-          "so-logstash-features" \
-          "so-kibana-features" \
+          TRUSTED_CONTAINERS=( "${TRUSTED_CONTAINERS[@]}"
+            "so-elasticsearch-features"
+            "so-filebeat-features"
+            "so-logstash-features"
+            "so-kibana-features"
+          )
         else
-          "so-elasticsearch" \
-          "so-filebeat" \
-          "so-logstash" \
-          "so-kibana" \
+          TRUSTED_CONTAINERS=( "${TRUSTED_CONTAINERS[@]}"
+            "so-elasticsearch"
+            "so-filebeat"
+            "so-logstash"
+            "so-kibana"
+          )
         fi
-        "so-fleet" \
-        "so-fleet-launcher" \
-        "so-freqserver" \
-        "so-grafana" \
-        "so-idstools" \
-        "so-influxdb" \
-        "so-kratos" \
-        "so-minio" \
-        "so-mysql" \
-        "so-nginx" \
-        "so-pcaptools" \
-        "so-playbook" \
-        "so-redis" \
-        "so-soc" \
-        "so-soctopus" \
-        "so-steno" \
-        "so-strelka-backend" \
-        "so-strelka-filestream" \
-        "so-strelka-frontend" \
-        "so-strelka-manager" \
-        "so-suricata" \
-        "so-telegraf" \
-        "so-thehive" \
-        "so-thehive-cortex" \
-        "so-thehive-es" \
-        "so-wazuh" \
-        "so-zeek" )
     else
-      TRUSTED_CONTAINERS=( \
-        "so-filebeat" \
-        "so-idstools" \
-        "so-logstash" \
-        "so-nginx" \
-        "so-redis" \
-        "so-steno" \
-        "so-suricata" \
-        "so-telegraf" \
-        "so-zeek" )
+      TRUSTED_CONTAINERS=(
+        "so-filebeat"
+        "so-idstools"
+        "so-logstash"
+        "so-nginx"
+        "so-redis"
+        "so-steno"
+        "so-suricata"
+        "so-telegraf"
+        "so-zeek" 
+      )
     fi
 }