{
    "name": "readOnlyFileSystem",
    "file": "securityContextCheck.rego",
    "policy_type": "k8s",
    "resource_type": "kubernetes_pod",
    "template_args": {
        "allowed": "false",
        "arg1": "limits",
        "arg2": "cpu",
        "name": "readOnlyFileSystem",
        "not_allowed": "true",
        "param": "readOnlyRootFilesystem",
        "param1": "securityContext",
        "prefix": "",
        "suffix": "",
        "value": "false"
    },
    "severity": "MEDIUM",
    "description": "Container images with readOnlyRootFileSystem set as false mounts the container root file system with write permissions",
    "reference_id": "AC-K8-IA-PO-M-0140",
    "category": "Identity and Access Management",
    "version": 1,
    "id": "AC_K8S_0078"
}