From 8ef035fb6c491d787035d4bc9587d24e2086bb1f Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 9 Jul 2026 02:41:54 +0000
Subject: [PATCH 1/2] Initial plan


From 277e1d57cbd699fa631bb9ac00f585203a2355b4 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 9 Jul 2026 02:44:35 +0000
Subject: [PATCH 2/2] fix: harden deployment container security context for
 alert #90

---
 tilt_modules/namespace/test/deployment.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tilt_modules/namespace/test/deployment.yaml b/tilt_modules/namespace/test/deployment.yaml
index 615bd02159..e23519d830 100644
--- a/tilt_modules/namespace/test/deployment.yaml
+++ b/tilt_modules/namespace/test/deployment.yaml
@@ -14,6 +14,8 @@ spec:
       containers:
       - name: busybox
         image: busybox
+        securityContext:
+          allowPrivilegeEscalation: false
         ports:
         - containerPort: 8000
         command: ["sh", "-c", "echo 'hello world' > index.html; busybox httpd -f -p 8000"]