Clarification on "points" and "advise", especially for RunAsNonRoot

[huornlmj]

Your question
I observed that the output of $ kubesec print-rules shows values for both "points" and "advise". I do not understand how the advise for the .runAsNonRoot context works though. Why does it have 1 point and 10 advise? For example, where does the 10 advise points come into play and in what situations?

 {
    "id": "RunAsNonRoot",
    "selector": "containers[] .securityContext .runAsNonRoot == true",
    "reason": "Force the running image to run as a non-root user to ensure least privilege",
    "kinds": [
      "Pod",
      "Deployment",
      "StatefulSet",
      "DaemonSet"
    ],
    "points": 1,
    "advise": 10
  }