oh, good catch it's actually line 84: https://github.com/facebook/osquery/blob/master/osquery/tables/applications/posix/docker.cpp#L84 it's the line where the response is compared