Missing Container Security Context

Description

Detects containers without securityContext configuration.

What Shoulder detects

Containers should run with security constraints defined in securityContext.

How to fix

Add securityContext to containers.

```yaml
securityContext:
  runAsNonRoot: true
  allowPrivilegeEscalation: false
```

Learn more: https://shoulder.dev/learn/kubernetes/cwe-250/missing-security-context

Applies to

Languages

📄 YAML

Frameworks

kubernetes

References

Documentation ↗ OWASP ↗ Learn about CWE-250

Scan for this issue

Detect with Shoulder CLI

npx @shoulderdev/cli trust --rule=kubernetes-missing-security-context .