diff --git a/images/stackrox-build.Dockerfile b/images/stackrox-build.Dockerfile
index c781dc0c..60b4560b 100644
--- a/images/stackrox-build.Dockerfile
+++ b/images/stackrox-build.Dockerfile
@@ -23,6 +23,7 @@ RUN dnf update -y && \
     dnf install -y \
         bzip2-devel \
         git-core \
+        jq \
         libzstd-devel \
         lz4-devel \
         nodejs \
@@ -51,13 +52,15 @@ ARG FETCH_VERSION=0.3.5
 ARG FETCH_SHA256=8d4d99e903b30dbd24290e9a056a982ea2326a05ded24c63be64df16e7e0d9f0
 RUN wget --no-verbose -O fetch https://github.com/gruntwork-io/fetch/releases/download/v${FETCH_VERSION}/fetch_linux_amd64 && \
     echo "${FETCH_SHA256} fetch" | sha256sum -c - && \
-    install fetch /usr/bin
+    install fetch /usr/bin && \
+    rm fetch
 
 ARG OSSLS_VERSION=0.10.1
 ARG OSSLS_SHA256=afdec2fa63b27ced4aeb3297399d45b0f06861e6ebc8cb2431b9653b7f113320
 RUN fetch --repo="https://github.com/stackrox/ossls" --tag="${OSSLS_VERSION}" --release-asset="ossls_linux_amd64" . && \
     echo "${OSSLS_SHA256} *ossls_linux_amd64" | sha256sum -c - && \
     install ossls_linux_amd64 /usr/bin/ossls && \
+    rm ossls_linux_amd64 && \
     ossls version
 
 COPY --from=builder /tmp/rocksdb/librocksdb.a /lib/rocksdb/librocksdb.a
diff --git a/images/stackrox-test.Dockerfile b/images/stackrox-test.Dockerfile
index 21137eb2..11fd9ece 100644
--- a/images/stackrox-test.Dockerfile
+++ b/images/stackrox-test.Dockerfile
@@ -35,7 +35,6 @@ RUN dnf update -y && \
         google-cloud-sdk \
         google-cloud-sdk-gke-gcloud-auth-plugin \
         java-1.8.0-openjdk-devel \
-        jq \
         kubectl \
         lsof \
         lz4 \