keep compliant workload free of shell activity
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s

This commit is contained in:
2026-08-14 22:23:17 -04:00
parent 2506b61ae0
commit d10018edc1
+1 -1
View File
@@ -15,7 +15,7 @@ spec:
containers:
- name: app
image: docker.io/library/busybox:1.36
command: ["sh", "-c", "echo compliant-workload-ready; sleep 3600"]
command: ["sleep", "3600"]
securityContext:
runAsNonRoot: true
runAsUser: 1000