diff --git a/images/build/setcap/README.md b/images/build/setcap/README.md
index f267f20d228..ad37af258be 100644
--- a/images/build/setcap/README.md
+++ b/images/build/setcap/README.md
@@ -1,4 +1,5 @@
-setcap
+### setcap
+
 This image is based on debian-base and installs the libcap2-bin package. The
 main use of this image is to apply `CAP_NET_BIND_SERVICE` to the kube-apiserver
 binary so that it can a bind to ports less than 1024 and still be run as non
@@ -6,14 +7,19 @@ root.
 
 This image is compiled for multiple architectures.
 
-How to release
+### How to release
+
 If you're editing the Dockerfile or some other thing, please bump the TAG in the Makefile.
 
-Build and  push images for all the architectures
+Build and push images for all the architectures:
+
+```console
 $ make all-push
 # ---> staging-k8s.gcr.io/setcap-amd64:TAG
 # ---> staging-k8s.gcr.io/setcap-arm:TAG
 # ---> staging-k8s.gcr.io/setcap-arm64:TAG
 # ---> staging-k8s.gcr.io/setcap-ppc64le:TAG
 # ---> staging-k8s.gcr.io/setcap-s390x:TAG
-If you don't want to push the images, run `make sub-build-{target_arch}`  or `make all-build` instead
+```
+
+If you don't want to push the images, run `make sub-build-{target_arch}` or `make all-build` instead