diff --git a/argocd/apps/penpot/penpot.yaml b/argocd/apps/penpot/penpot.yaml
index 5cec1e4..bfab107 100644
--- a/argocd/apps/penpot/penpot.yaml
+++ b/argocd/apps/penpot/penpot.yaml
@@ -36,12 +36,12 @@ spec:
           value: 'true'
         - name: ingress.annotations.cert-manager\.io\/cluster-issuer
           value: lets-encrypt-staging
-          SecurityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-            runAsNonRoot: true
+        - name: backend.containerSecurityContext
+          values:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
     chart: penpot
   destination:
     server: 'https://kubernetes.default.svc'