Prove Your Docker Compose Container Runs With Less Privilege

Build a disposable Docker Compose worker, then check its non-root identity, read-only filesystem, dropped capabilities and temporary storage with repeatable probes.

Prove Your Docker Compose Container Runs With Less Privilege