Closed zhangguanzhang closed 6 months ago
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/wall |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chfn |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/chage |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chfn |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chsh |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/passwd |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/gpasswd |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chfn |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chsh |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/newgrp |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/mount |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chfn |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/wall |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chfn |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/gpasswd |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/wall |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/mount |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/wall |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/newgrp |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/wall |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chsh |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/passwd |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/sbin/unix_chkpwd |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chfn |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/newgrp |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/wall |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/gpasswd |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chfn |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/umount |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chsh |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/newgrp |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/expiry |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/gpasswd |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/chsh |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/expiry |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/umount |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/gpasswd |
code | level | alerts | ||
---|---|---|---|---|
CIS-DI-0007 | FATAL | Always combine 'apt-get update' with 'apt-get install | upgrade' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
DKL-DI-0005 | FATAL | Use 'rm -rf /var/lib/apt/lists' after 'apt-get install | update' : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y |
CIS-DI-0001 | WARN | Last user should not be root | ||
DKL-DI-0003 | WARN | Avoid dist-upgrade in container : | 0 /bin/sh -c apt-get update && apt-get dist-upgrade -y | |
DKL-DI-0006 | WARN | Avoid 'latest' tag | ||
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build | ||
CIS-DI-0006 | INFO | not found HEALTHCHECK statement | ||
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/sbin/unix_chkpwd |
code | level | alerts |
---|---|---|
CIS-DI-0001 | WARN | Last user should not be root |
DKL-DI-0006 | WARN | Avoid 'latest' tag |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setuid file: urwxr-xr-x usr/bin/mount |
@qiangxuhui PTAL