diff --git a/config/apps/argo-server.yaml b/config/apps/argo-server.yaml
index 50e02992..dbf29084 100644
--- a/config/apps/argo-server.yaml
+++ b/config/apps/argo-server.yaml
@@ -129,9 +129,12 @@ spec:
             cpu: 100m
             memory: 20Mi
         securityContext:
+          allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
         volumeMounts:
         - mountPath: /tmp
           name: tmp