Container Capabilities Unrestricted @ /docker-compose.yml

[Supakorn19934]

Checkmarx (IaC-Security): Container Capabilities Unrestricted
Checkmarx Project: Supakorn19934/nginx-sticky
Repository URL: https://github.com/Supakorn19934/nginx-sticky
Branch: main
Scan ID: 98f1608e-e078-4f21-9ece-24ddb65d5a43

---

Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.

Locations:

Result 1:
Severity: LOW
State: TO_VERIFY
Status: NEW
    File: /docker-compose.yml[3,0]
    Expected value: Docker compose file to have 'cap_drop' attribute
    Actual value: Docker compose file doesn't have 'cap_drop' attribute. Make sure your container only has necessary capabilities.
    Review result in Checkmarx One: Container Capabilities Unrestricted