spec:
containers:
- name: build
image: git.pyrocufflink.net/containerimages/build/selinux:main
imagePullPolicy: Always
securityPolicy:
runAsNonRoot: true