Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise

Check if containers are running with low UID, which might cause conflicts with the host's user table.

Check if containers are running with low UID, which might cause conflicts with the host's user table.

Check if containers are running with low UID, which might cause conflicts with the host's user table.

Check if containers are running with low UID, which might cause conflicts with the host's user table.

Check if containers are running with low UID, which might cause conflicts with the host's user table.

Check if containers are running with low UID, which might cause conflicts with the host's user table.

Containers should drop 'ALL' or at least 'NET_RAW' capabilities

Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls