BasedOnUBICheck evaluates if the provided image is based on the Red Hat Universal Base Image.

HasLicenseCheck evaluates that the image contains a license definition available at /licenses.

HasModifiedFilesCheck evaluates that no files from the base layer have been modified by subsequent layers by comparing the file list installed by Packages against the file list modified in subsequent layers.

HasProhibitedPackages evaluates that the image does not contain prohibited packages, which refers to packages that are not redistributable without an appropriate license.

HasRequiredLabelsCheck evaluates the image manifest to ensure that the appropriate metadata labels are present on the image asset as it exists in its current container registry.

UnderLayerMaxCheck ensures that the image has less layers in its assembly than a predefined maximum.

RunAsNonRootCheck evaluates the image to determine that the runtime UID is not 0, which correlates to the root user.