From 179d11968e56a4d75c9ea9406099e84789bd30d0 Mon Sep 17 00:00:00 2001
From: Bakery Admin <admin@bakewise.ai>
Date: Thu, 22 Jan 2026 17:38:34 +0100
Subject: [PATCH] Fix resources isues 12

---
 .../cicd/tekton-helm/templates/namespace.yaml          |  5 ++++-
 .../cicd/tekton-helm/templates/trigger-binding.yaml    | 10 +++++-----
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/infrastructure/cicd/tekton-helm/templates/namespace.yaml b/infrastructure/cicd/tekton-helm/templates/namespace.yaml
index 7d75ca47..aa18fcc8 100644
--- a/infrastructure/cicd/tekton-helm/templates/namespace.yaml
+++ b/infrastructure/cicd/tekton-helm/templates/namespace.yaml
@@ -6,4 +6,7 @@ metadata:
   labels:
     app.kubernetes.io/name: {{ .Values.labels.app.name }}
     app.kubernetes.io/component: {{ .Values.labels.app.component }}
-{{- end }}
\ No newline at end of file
+    pod-security.kubernetes.io/enforce: baseline
+    pod-security.kubernetes.io/warn: baseline
+    pod-security.kubernetes.io/audit: baseline
+{{- end }}
diff --git a/infrastructure/cicd/tekton-helm/templates/trigger-binding.yaml b/infrastructure/cicd/tekton-helm/templates/trigger-binding.yaml
index 3d53a89f..f2922843 100644
--- a/infrastructure/cicd/tekton-helm/templates/trigger-binding.yaml
+++ b/infrastructure/cicd/tekton-helm/templates/trigger-binding.yaml
@@ -12,12 +12,12 @@ metadata:
 spec:
   params:
     - name: git-repo-url
-      value: "{{"{{ .payload.repository.clone_url }}"}}"
+      value: $(body.repository.clone_url)
     - name: git-revision
-      value: "{{"{{ .payload.after }}"}}"
+      value: $(body.after)
     - name: git-branch
-      value: "{{"{{ .payload.ref }}" | replace "refs/heads/" "" | replace "refs/tags/" "" }}"
+      value: $(body.ref)
     - name: git-repo-name
-      value: "{{"{{ .payload.repository.name }}"}}"
+      value: $(body.repository.name)
     - name: git-repo-full-name
-      value: "{{"{{ .payload.repository.full_name }}"}}"
\ No newline at end of file
+      value: $(body.repository.full_name)
\ No newline at end of file