Container Hardening

Reducing a container's attack surface by building minimal images, running as non-root, dropping unnecessary capabilities, making filesystems read-only, and removing unneeded tools, so a compromised container offers an attacker little to work with.