The current docker-bench-security.sh uses #!/bin/bash for it's shebang but bash is not included in the Docker when built as exampled. With the current init it'll run but attaching to a container and attempting to manually invoke it (since it won't pick up environmental variables for setting excludes) breaks sh since it won't execute because of an incorrect shebang.