Software Container Image Sanity Checks

Regular testing to avoid regressions of:

1. check that the root user/groups have not been modified (this might do anything, but should reject containers like this just because they are suspect).
2. Check that other entries do not have things they shouldn’t have (ie. odd entries for shell or home).
3. Check for escape characters/sequences in the files.

This will happen at a minimum when a Docker image is initially uploaded. Should it also occur every time it is deployed?