# Container runs as root

A Dockerfile whose last USER is root or 0, or a Dockerfile with no USER instruction.

Area: Security

## What you need to supply

The Dockerfile text. The check does not build or run the image.

## If it reports a finding

High severity. The suggested next step is to end the image with a non-root USER the image already supports.

## What this does not prove

A root user that exists only in a comment is not a USER instruction. No finding does not prove the running container is unprivileged.

## Instruction that this check is written to notice

```
USER root
```

Reading this page does not submit infrastructure. The HTML page is https://skaleagents.com/checks/container-runs-as-root.