security context

gitea-runner/main.yaml

@@ -82,6 +82,13 @@ spec:
         image: docker.io/gitea/act_runner:0.2.11-dind-rootless
         imagePullPolicy: IfNotPresent
         name: act-runner
+        securityContext:
+          runAsUser: 1000
+          runAsGroup: 1000
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
         volumeMounts:
         - mountPath: /data
           name: data