diff --git a/.changeset/bright-students-eat.md b/.changeset/bright-students-eat.md
new file mode 100644
index 0000000..5ac0432
--- /dev/null
+++ b/.changeset/bright-students-eat.md
@@ -0,0 +1,7 @@
+---
+"@fake-scope/fake-pkg": major
+---
+
+* rename `securityContext` to `containerSecurityContext` in `values.yaml`
+* mount volumes for tmp directories to make containers work in accordance with best practices, that is with read-only file systems
+* use secure defaults for container security policy