New
: Helm chart now explicitly declares
DAC_READ_SEARCH
, which is required to discover dependencies and run Certificate Expiry attacks. Most container runtimes already provide a superset of this capability (
DAC_OVERRIDE
) by default.