diff --git a/templates/questions/security/securityContextContainer.yaml b/templates/questions/security/securityContextContainer.yaml
index 97d1ac2196a..521550e64e9 100644
--- a/templates/questions/security/securityContextContainer.yaml
+++ b/templates/questions/security/securityContextContainer.yaml
@@ -11,4 +11,4 @@
                 description: When supported by the container, this sets the UMASK for the App. Not supported by all Apps
                 schema:
                   type: string
-                  default: "002"
+                  default: "0022"