keep compliant workload free of shell activity
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s

This commit is contained in:
2026-08-14 22:23:17 -04:00
parent 2506b61ae0
commit d10018edc1
+1 -1
View File
@@ -15,7 +15,7 @@ spec:
containers: containers:
- name: app - name: app
image: docker.io/library/busybox:1.36 image: docker.io/library/busybox:1.36
command: ["sh", "-c", "echo compliant-workload-ready; sleep 3600"] command: ["sleep", "3600"]
securityContext: securityContext:
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1000 runAsUser: 1000