Change Request: Docker containers do not run as root

[Compton-US]

Can we add an issue to the backlog (not urgent) to make a proper OCI container spec with a Dockerfile and run the application not as a root user? Minor concern, but something worth documenting and potentially useful for CM-8 evidence later (if we extend scans beyond just RA-5).

Originally posted by @aj-stein-nist in #13 (review)