Get Involved
Query: Deployment containers should not run with root privileges
Description
Containers in a Deployment should not run with root privileges. By default, many container services run as the privileged root user, and applications execute inside the container as root despite not requiring privileged execution. Preventing root execution by using non-root containers or a rootless container engine limits the impact of a container compromise.
Query
Tables used in this query:
Controls using this query: