diff --git a/yaml/deployment.yaml b/yaml/deployment.yaml
index 5fee94a..8fb5563 100644
--- a/yaml/deployment.yaml
+++ b/yaml/deployment.yaml
@@ -65,6 +65,8 @@ spec:
               cpu: "0.01"
           securityContext:
             allowPrivilegeEscalation: false
+            runAsNonRoot: true
+            readOnlyRootFilesystem: true
             capabilities:
               drop:
               - ALL