From 8f15476368fe4217eca69b6a6eb7c6421b8e595f Mon Sep 17 00:00:00 2001
From: Apacelus <46828271+Apacelus@users.noreply.github.com>
Date: Tue, 21 Nov 2023 07:58:28 +0000
Subject: [PATCH] Drop all caps

---
 .github/workflows/update-ostree-repo.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/update-ostree-repo.yml b/.github/workflows/update-ostree-repo.yml
index b7be909..585e86e 100644
--- a/.github/workflows/update-ostree-repo.yml
+++ b/.github/workflows/update-ostree-repo.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-22.04
     container:
       image: fedora:latest
-      options: --name=fedora-container --cap-add CAP_SYS_ADMIN
+      options: --name=fedora-container --cap-add CAP_SYS_ADMIN --cap-drop all
       volumes:
         - /mnt/fedora-container:/mnt/rpm-ostree-repo
     steps: