diff --git a/CHANGELOG.md b/CHANGELOG.md
index 93800d99..e462f1f3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -124,7 +124,7 @@
 ## v1.0.0-rc9 [2019-10-05]
 
 * VERSION: update to 1.0.0-rc9 (#2134 by @cyphar)
-* *: verify operations on /proc/... are on procfs (#2130 by @cyphar)
+* `*`: verify operations on /proc/... are on procfs (#2130 by @cyphar)
 * Only allow proc mount if it is procfs (#2129 by @crosbymichael)
 * Change the permissions of the notify listener socket to rwx for everyone (#2041 by @jburianek)
 * libcontainer/nsenter: Don't import C in non-cgo file (#2126 by @titanous)
@@ -205,7 +205,7 @@
 
 ## v1.0.0-rc6 [2018-11-22]
 
-* *: release v1.0.0~rc6 (#1937 by @cyphar)
+* `*`: release v1.0.0~rc6 (#1937 by @cyphar)
 * Small fixes for CRIU based test cases (#1936 by @adrianreber)
 * libcontainer: Set 'status' in hook stdin (#1741 by @wking)
 * Bump CRIU to 3.11 (#1935 by @adrianreber)
@@ -408,7 +408,7 @@
 * Use Prctl() and ioctl wrapper functions from x/sys/unix (#1504 by @tklauser)
 * libcontainer/user: add supplementary groups only for non-numeric users (#1450 by @vrothberg)
 * Remove shfmt (#1510 by @crosbymichael)
-* *: fix shfmt (#1505 by @cyphar)
+* `*`: fix shfmt (#1505 by @cyphar)
 * Expose memory.use_hierarchy in MemoryStats (#1378 by @derekwaynecarr)
 * libcontainer/specconv/spec_linux: Add support for (no)lazytime (#1460 by @wking)
 * runc only works on Linux so remove putative Solaris and unsupported main (#1502 by @justincormack)
@@ -423,7 +423,7 @@
 * travis: set go_import_path to github.com/opencontainers/runc (#1388 by @avagin)
 * Use Prctl() from x/sys/unix instead of own wrapper (#1478 by @tklauser)
 * Update spec to 239c4e44f2a612ed85f6db9c66247aa33f4 (#1473 by @crosbymichael)
-* Use NLA_* constants from x/sys/unix instead of syscall (#1474 by @tklauser)
+* Use `NLA_*` constants from x/sys/unix instead of syscall (#1474 by @tklauser)
 * Use symlink xattr functions from x/sys/unix (#1470 by @tklauser)
 * Switch examples in README.md from syscall to x/sys/unix (#1467 by @tklauser)
 * vendor.conf: Bump golang.org/x/sys to a55a76086885b80f79961eacb876ebd8caf3868d (#1464 by @wking)
@@ -484,7 +484,7 @@
 * add pre-dump and parent-path to checkpoint (#1001 by @x1022as)
 * Add --preserve-file-descriptors=N to create (#1320 by @ijc)
 * small cleanup for `runc ps` man pages (#1342 by @sak0)
-* Fix state when _LIBCONTAINER in environment (#1317 by @hqhq)
+* Fix state when `_LIBCONTAINER` in environment (#1317 by @hqhq)
 * Don't override system error (#1339 by @cpuguy83)
 * ps: --format value check (#1332 by @sak0)
 * update go version at travis-ci (#1335 by @mcuadros)
@@ -531,7 +531,7 @@
 * Fix leftover cgroup directory issue (#1196 by @hqhq)
 * Add badge for Go Report Card (#1253 by @xlgao-zju)
 * Add Travis CI badge to README (#1250 by @caniszczyk)
-* *: fix go-vet failures (#1243 by @cyphar)
+* `*`: fix go-vet failures (#1243 by @cyphar)
 * travis: add travis-ci (#1246 by @cyphar)
 * Add integration for update rt period and runtime (#1203 by @WeiZhang555)
 * Split the code for remounting mount points and mounting paths. (#1222 by @justincormack)
@@ -544,7 +544,7 @@
 * validate: Check that the given namespace path is a symlink (#1221 by @sameo)
 * Consoles, consoles, consoles. (#1018 by @cyphar)
 * Fix thread safety of SelinuxEnabled and getSelinuxMountPoint (#1216 by @eparis)
-* *: add information about security mailing list (#1213 by @cyphar)
+* `*`: add information about security mailing list (#1213 by @cyphar)
 * Fix typo. (#1211 by @yummypeng)
 * Fix typo (#1210 by @xianlubird)
 * delete unused variable (#1207 by @datawolf)
@@ -577,7 +577,7 @@
 * Remove unnecessary cloneflag validation (#1153 by @hqhq)
 * Detect and forbid duplicated namespace in spec (#1150 by @WeiZhang555)
 * Make parent mount private before bind mounting rootfs (#1148 by @rhvgoyal)
-* validator: unbreak sysctl net.* validation (#1149 by @cyphar)
+* validator: unbreak sysctl `net.*` validation (#1149 by @cyphar)
 * Check pid file (#1147 by @datawolf)
 * nsenter: guarantee correct user namespace ordering (#977 by @cyphar)
 * Small typo in README (#1141 by @rajasec)
@@ -708,7 +708,7 @@
 * Fix libcontainer/nsenter/README.md (#951 by @haiyanmeng)
 * fix setting net_cls classid (#937 by @hushan)
 * Fixed typo in build constraint. (#947 by @hencrice)
-* configs: fix json tags for CpuRt* options (#949 by @cyphar)
+* configs: fix json tags for `CpuRt*` options (#949 by @cyphar)
 * libcontainer: Add a helper func to set CriuPath (#936 by @macrosheep)
 * Let the user explicitly specify `additionalGids` on `runc exec` (#913 by @georgethebeatle)
 * Fix typo (#942 by @ggaaooppeenngg)
@@ -770,7 +770,7 @@
 * Unify log setting's error output (#844 by @zhaoleidd)
 * godeps: update seccomp to 60c9953736798c4a04e90d0f3da2f933d44fd4c4 (#842 by @cyphar)
 * Fix update kernel memory test (#828 by @hqhq)
-* *: correctly chown() consoles (#836 by @cyphar)
+* `*`: correctly chown() consoles (#836 by @cyphar)
 * Update cli package (#810 by @hqhq)
 * Fix outdated comment for loadSpec (#835 by @zhaoleidd)
 * Fix some spelling typo in manual (#833 by @zhaoleidd)
@@ -781,7 +781,7 @@
 * integration: fix cgroup parsing (#812 by @cyphar)
 * Update nsenter README (#824 by @ggaaooppeenngg)
 * Updating runc man page (#822 by @rajasec)
-* Fix GetLongBit() returns value when _SC_LONG_BIT is not available (#823 by @mlaventure)
+* Fix GetLongBit() returns value when `_SC_LONG_BIT` is not available (#823 by @mlaventure)
 * libcontainer: nsenter: nsexec.c: fix warnings (#821 by @runcom)
 * Revert "Need to make sure labels applied to /dev" (#816 by @cyphar)
 * Adding kernel mem tcp for update command (#813 by @rajasec)
@@ -970,7 +970,7 @@
 * Adding pids subsystem in SPEC.md (#545 by @rajasec)
 * Create some util funcs that are common between start and exec (#537 by @duglin)
 * Require container id as arg1 (#541 by @crosbymichael)
-* *: use coreos/go-systemd/activation for socket activation (#542 by @runcom)
+* `*`: use coreos/go-systemd/activation for socket activation (#542 by @runcom)
 * Update spec to v0.3.0 (#536 by @crosbymichael)
 * Fixing capabilities name in SPEC.md (#540 by @rajasec)
 * Fixing usage in resume command (#539 by @rajasec)
@@ -1077,7 +1077,7 @@
 * Remove naked return (#355 by @keloyang)
 * Windows: Tidy libcontainer\devices (#365 by @lowenna)
 * Windows: Refactor configs/cgroup.go (#362 by @lowenna)
-* Fixes build tags on cgroups\fs\*.go (#364 by @lowenna)
+* Fixes build tags on `cgroups\fs\*.go` (#364 by @lowenna)
 * Add criu related debug output (#238 by @adrianreber)
 * libcontainer/SPEC.md: fix /dev/stdio symlinks (#337 by @alban)
 * Fixing typo in the comment for exit (#358 by @rajasec)
@@ -1255,7 +1255,7 @@
 * Some new stuff for makefile (#45 by @LK4D4)
 * Enable build on unsupported platforms (#68 by @mtesselH)
 * fixed typo (#63 by @kennethlimcp)
-* libcontainer: user: fix GetAdditionalGroups* API (#59 by @cyphar)
+* libcontainer: user: fix `GetAdditionalGroups*` API (#59 by @cyphar)
 * Update config based on spec changes (#66 by @crosbymichael)
 * linux: Don't prepend process' cwd if rootfs path is already absolute (#40 by @cgwalters)
 * Added all dependency to install in Makefile (#32 by @7imbrook)
@@ -1289,7 +1289,7 @@
 * Fix kmem limit set (docker/libcontainer#637 by @hqhq)
 * Fix some suspicious things in vendor (docker/libcontainer#635 by @LK4D4)
 * gofmt to fix formatting (docker/libcontainer#634 by @unclejack)
-* Handle SYS_setns not existing but __NR_setns does. (docker/libcontainer#630 by @tsuna)
+* Handle SYS_setns not existing but `__NR_setns` does. (docker/libcontainer#630 by @tsuna)
 * Only try to get AdditionalGroups if they are configured. (docker/libcontainer#627 by @mrunalp)
 * Add the memory swappiness tuning support to libcontainer (docker/libcontainer#622 by @ktraghavendra)
 * Fix nsinit README.md config link (docker/libcontainer#626 by @icecrime)
@@ -1338,7 +1338,7 @@
 * remove unused functions (docker/libcontainer#558 by @hqhq)
 * Split namespace syscall content for building on non-Linux (docker/libcontainer#554 by @estesp)
 * cgroups/systemd: remove useless code (docker/libcontainer#555 by @avagin)
-* cgroups: add support blkio.throttle.read/write_* (docker/libcontainer#539 by @Mashimiao)
+* cgroups: add support `blkio.throttle.read/write_*` (docker/libcontainer#539 by @Mashimiao)
 * Add cgroup mount type for mounting container local cgroups (docker/libcontainer#553 by @crosbymichael)
 * cgroups: add support of devices deny for another use of cgroup devices (docker/libcontainer#492 by @Mashimiao)
 * Check for cmd.Process not-nilness in setnsProcess.terminate() (docker/libcontainer#550 by @LK4D4)
@@ -1359,7 +1359,7 @@
 * Change mount point propogation to default to slave (docker/libcontainer#520 by @rhatdan)
 * Add arch support for ARMv8 and PowerPC, and fix ARMv7 (docker/libcontainer#524 by @adconrad)
 * integration: use test helper for error check (docker/libcontainer#508 by @Mic92)
-* Read _LIBCONTAINER_INITPIPE in nsexec.c (docker/libcontainer#523 by @LK4D4)
+* Read `_LIBCONTAINER_INITPIPE` in nsexec.c (docker/libcontainer#523 by @LK4D4)
 * Add cache to MemoryStats (docker/libcontainer#518 by @crosbymichael)
 * Add value checking on relabel command for selinux (docker/libcontainer#509 by @rhatdan)
 * Append childpipe for adding addtional Fds to container (docker/libcontainer#516 by @crosbymichael)
@@ -1588,7 +1588,7 @@
 * Get UID and GID for device nodes (docker/libcontainer#173 by @crosbymichael)
 * syncpipe: consume from parent before closing child (docker/libcontainer#170 by @bernerdschaefer)
 * Update container to have an ID provided by the user (docker/libcontainer#166 by @crosbymichael)
-* Use blkio.throttle.* stats when CFQ is not in use (docker/libcontainer#167 by @discordianfish)
+* Use `blkio.throttle.*` stats when CFQ is not in use (docker/libcontainer#167 by @discordianfish)
 * Add support for user defined mounts in tmpfs (docker/libcontainer#168 by @crosbymichael)
 * Use --privileged in Makefile (docker/libcontainer#164 by @crosbymichael)
 * Allow docker to free container labels when containers are removed. (docker/libcontainer#162 by @rhatdan)
@@ -1609,7 +1609,7 @@
 * Add "update-vendor.sh" script and vendor our current deps... (docker/libcontainer#140 by @tianon)
 * Lock the thread first thing in init. (docker/libcontainer#137 by @mrunalp)
 * DefaultCreateCommand supports command w/ flags (docker/libcontainer#136 by @bernerdschaefer)
-* Only import "testing" from *_test.go (docker/libcontainer#135 by @peterbourgon)
+* Only import "testing" from `*_test.go` (docker/libcontainer#135 by @peterbourgon)
 * Update more "dotcloud/docker" refs to "docker/docker" (docker/libcontainer#134 by @tianon)
 * Move "pkg/user" into libcontainer... (docker/libcontainer#103 by @tianon)
 * fix the order of setns() (docker/libcontainer#58 by @maebashi)