Set readOnlyRootFilesystem as true in Interceptor

savitaashture · tekton-robot · commit 0dd4391344c9 · 2024-09-04T06:33:20.000+01:00
diff --git a/config/interceptors/core-interceptors-deployment.yaml b/config/interceptors/core-interceptors-deployment.yaml
@@ -82,6 +82,7 @@ spec:
           timeoutSeconds: 5
         securityContext:
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
           # User 65532 is the distroless nonroot user ID
           runAsUser: 65532
           runAsGroup: 65532
