bug fixed

2025-04-08 18:02:57 +00:00 · 2025-04-08 18:02:57 +00:00 · e59c1fb627
commit e59c1fb627
parent 363ed9db57
1 changed files with 6 additions and 1 deletions
--- a/tasks/git-clone-checkout/task.yaml
+++ b/tasks/git-clone-checkout/task.yaml
@ -103,7 +103,12 @@ spec:
        value: $(workspaces.ssl-ca-directory.path)
      securityContext:
        runAsNonRoot: true
-        runAsUser: 65532
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+            - ALL
+        seccompProfile:
+          type: RuntimeDefault
      script: |
        #!/usr/bin/env sh
        set -eu