From a5fed4a6563edff8f87c34e068b547ed9186484f Mon Sep 17 00:00:00 2001
From: Conan Scott <conanscott@gmail.com>
Date: Mon, 2 Feb 2026 14:17:31 +1100
Subject: [PATCH] scc

---
 manifests/deployment.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifests/deployment.yaml b/manifests/deployment.yaml
index 5944784..2295f47 100644
--- a/manifests/deployment.yaml
+++ b/manifests/deployment.yaml
@@ -37,10 +37,10 @@ spec:
               memory: "512Mi"
               cpu: "250m"
           securityContext:
-            allowPrivilegeEscalation: true
+            allowPrivilegeEscalation: false
             capabilities:
               drop: ["ALL"]
-            runAsNonRoot: false
+            runAsNonRoot: true
             seccompProfile:
               type: RuntimeDefault
       volumes: