From 99394e73ef0d7e9a889b925075a485b1bdf1ff23 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 9 Jul 2026 02:20:29 +0000
Subject: [PATCH 1/2] Initial plan


From e78b49322bd196749765d6d29ec811606fc39169 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 9 Jul 2026 02:22:27 +0000
Subject: [PATCH 2/2] fix: add pod-level securityContext to secure backend
 deployment (CKV_K8S_29)

---
 k8s/secure/backend/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/k8s/secure/backend/deployment.yaml b/k8s/secure/backend/deployment.yaml
index c0535e0e39..1ce1db6a3b 100644
--- a/k8s/secure/backend/deployment.yaml
+++ b/k8s/secure/backend/deployment.yaml
@@ -30,6 +30,8 @@ spec:
         app: backend
     spec:
       serviceAccountName: webapp
+      securityContext:
+        runAsNonRoot: true
       containers:
         - name: backend
           image: android-patterns