Query: docker_container_privileged

select
  id as resource,
  case
    when inspect -> 'HostConfig' ->> 'Privileged' = 'true' then 'alarm'
    else 'ok'
  end as status,
  case
    when inspect -> 'HostConfig' ->> 'Privileged' = 'true' then (names ->> 0) || ' running as a privileged container.'
    else (names ->> 0) || ' not running as a privileged container.'
  end as reason
  , _ctx ->> 'connection_name' as connection_name
from
  docker_container;