DockerSec Curated list of docker security resources Low-Hanging Fruit Drop container capabilities Security Analyses and Pentests Default capabilities allow arbitrary code execution