spec:
  containers:
  - name: build
    image: git.pyrocufflink.net/containerimages/build/selinux:main
    imagePullPolicy: Always
    securityPolicy:
      runAsNonRoot: true