Docker arbitrary container run
You are not sanitizing user input that is used as an argument for the Docker image. We recommend that you sanitize user input before passing it to a function call.
@app.route('/someUrl')
def docker_arbitrary_container_run_noncompliant():
    client = docker.from_env()
    img = request.args.get("image")
    # Noncompliant: Unsanitised user input is passed to `run`.
    client.containers.run(img, 'echo non compliant')
@app.route('/someUrl')
def docker_arbitrary_container_run_compliant():
    client = docker.from_env()
    img = os.environ["image"]
    # Compliant: Input from environment variable is passed to `run`.
    client.containers.run(img, 'echo hello world')