Worked on the woodpecker-ci/woodpecker repository to enhance Kubernetes backend security and improve the reliability of non-root pod execution. Focused on backend development and containerization, the work introduced support for allowPrivilegeEscalation and fine-grained Linux capabilities within Kubernetes backend configurations, enabling safer privilege management for CI workloads. Addressed permission errors for non-root pods by implementing a conditional init container in Go, which pre-creates working directories with correct permissions to align with Pod Security Standards. These changes reduced runtime permission issues and provided safer defaults for container privilege handling, strengthening the security posture and operational reliability of Woodpecker CI’s Kubernetes integration.