fix(security): harden containers with read-only root filesystems (Kubescape C-0017)#2455

Merged

devantler merged 3 commits into

mainfrom

claude/security-context-readonly-rootfs

Jul 4, 2026

Commits on Jul 4, 2026

fix(security): harden containers with read-only root filesystems (Kubescape C-0017)

devantler
and
claude
committed
Merge remote-tracking branch 'origin/main' into claude/security-context-readonly-rootfs
devantler
committed
fix(security): cap new emptyDirs and scope the kubescape privileged exception to node-agent/storage

devantler
and
claude
committed