Change to numbered USER
Could we change the Dockerfile to use a number instead of a name for the final USER line? On clusters that enforce a non-root policy it isn't possible with the AdmissionController to determine that the name isn't associated with UID 0 inside the container until the container is started.
By using USER 333 instead of USER scanner-cli, we're able to move forward without a hiccup.