Container security

Objective

Minimize what an attacker can do if they take control of a containerized application: no root, no unnecessary capabilities, no writes to the filesystem, no secrets in images, scanned images and, if possible, a Docker daemon that itself runs without privileges.