Writable Root Filesystem

Description

Detects containers that allow writes to the root filesystem.

What Shoulder detects

Container allows writes to the root filesystem.

How to fix

Enable read-only root filesystem.

```yaml
securityContext:
  readOnlyRootFilesystem: true
```

Learn more: https://shoulder.dev/learn/kubernetes/cwe-732/writable-root-filesystem

Applies to

Languages

📄 YAML

Frameworks

kubernetes

References

Documentation ↗ Learn about CWE-732

Scan for this issue

Detect with Shoulder CLI

npx @shoulderdev/cli trust --rule=kubernetes-writable-root-filesystem .