github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/dockerfile/general/AVD-DS-0002/docs.md (about) 1 2 Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile. 3 4 ### Impact 5 <!-- Add Impact here --> 6 7 <!-- DO NOT CHANGE --> 8 {{ remediationActions }} 9 10 ### Links 11 - https://docs.docker.com/develop/develop-images/dockerfile_best-practices/ 12 13