diff --git a/argocd/apps/penpot/penpot.yaml b/argocd/apps/penpot/penpot.yaml
index c40ed33..56e1934 100644
--- a/argocd/apps/penpot/penpot.yaml
+++ b/argocd/apps/penpot/penpot.yaml
@@ -37,10 +37,10 @@ spec:
         - name: ingress.annotations.cert-manager\.io\/cluster-issuer
           value: lets-encrypt-staging
           backend.containerSecurityContext:
-        - name: allowPrivilegeEscalation
-          value: 'false'
-        - name: capabilities.drop
-          value: 'ALL'
+          - name: allowPrivilegeEscalation
+            value: 'false'
+          - name: capabilities.drop
+            value: '["ALL"]'
     chart: penpot
   destination:
     server: 'https://kubernetes.default.svc'