Docker from Scratch: Secure Your Containers With Non-Root Users

Run containers as non-root users, choose minimal base images, and keep secrets out of your Docker layers.