Assuming you have a shell within your container, InSpec can be a great tool (https://www.inspec.io/ https://www.inspec.io/) as you can pass a "docker" target fo

Assuming you have a shell within your container, InSpec can be a great tool (https://www.inspec.io/ https://www.inspec.io/) as you can pass a "docker" target for your compliance profiles. Works great for us :)