keep compliant workload free of shell activity
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
This commit is contained in:
@@ -15,7 +15,7 @@ spec:
|
||||
containers:
|
||||
- name: app
|
||||
image: docker.io/library/busybox:1.36
|
||||
command: ["sh", "-c", "echo compliant-workload-ready; sleep 3600"]
|
||||
command: ["sleep", "3600"]
|
||||
securityContext:
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
|
||||
Reference in New Issue
Block a user