#securitycontext

Hari 33: SecurityContext Hardening — 20 Temuan ke 0

Deployment.yaml di-hardened: non-root, read-only filesystem, cap drop ALL, probes, resources. 3 scanner: Kubesec 0→11, Checkov 20→0, Trivy 16→0. Pods tetap running.