Safe
docker run --rm --read-only --cap-drop ALL -v "$PWD/out":/out app:1.4 reportcross-platform · bash · Expert
Every flag here narrows what the container can do: an immutable root filesystem, no Linux capabilities at all, and a single writable path…
The full explanation and danger signals for this pack are part of Pro.
Think you can spot these under time pressure?
Start Training