From 4111ec31b05bd745a32d3b136af7c9d00914372a Mon Sep 17 00:00:00 2001
From: OrbisAI Sec <orbisai@thesecurity.online>
Date: Fri, 17 Oct 2025 15:26:37 +0530
Subject: [PATCH] Fix: Container Filesystem Allows Unauthorized File
 Modifications and Malicious Downloads in metrics/otel/compose.yaml (#5308)

fix: yaml.docker-compose.security.writable-filesystem-service.writable-filesystem-service-metrics-otel-compose.yaml

Co-authored-by: orbisai-sec <kira@thesecurity.online>
---
 metrics/otel/compose.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/metrics/otel/compose.yaml b/metrics/otel/compose.yaml
index 4567588ff..ebf775f28 100644
--- a/metrics/otel/compose.yaml
+++ b/metrics/otel/compose.yaml
@@ -1,6 +1,7 @@
 version: "2"
 services:
   otel-collector:
+    read_only: true
     image: otel/opentelemetry-collector-contrib
     command: ["--config=/etc/otelcol-contrib/config.yaml", "--feature-gates=-exporter.datadogexporter.DisableAPMStats", "${OTELCOL_ARGS}"]
     volumes: