diff --git a/ci/podTemplate.yaml b/ci/podTemplate.yaml
index 258073c..823e05d 100644
--- a/ci/podTemplate.yaml
+++ b/ci/podTemplate.yaml
@@ -15,3 +15,5 @@ spec:
     resources:
       limits:
         cpu: 500m
+    securityContext:
+      readOnlyRootFilesystem: true