Open kscherer opened 3 years ago
I would love to integrate the buildpack tekton tasks into our pipelines but the use of privileged access isn't going to get past our security review.
https://github.com/buildpacks/tekton-integration/blob/main/task/buildpacks/0.3/buildpacks.yaml#L118
Is it required for the chown? I am using the kaniko task and it uses runAsUser: 0 but not privileged. Ideally it would be possible to build images without any elevated permissions.
We had the same question! :-)
Some context here:
Links:
This has been fixed in https://github.com/tektoncd/catalog/blob/main/task/buildpacks/0.4/buildpacks.yaml, I think we can close this issue.
I would love to integrate the buildpack tekton tasks into our pipelines but the use of privileged access isn't going to get past our security review.
https://github.com/buildpacks/tekton-integration/blob/main/task/buildpacks/0.3/buildpacks.yaml#L118
Is it required for the chown? I am using the kaniko task and it uses runAsUser: 0 but not privileged. Ideally it would be possible to build images without any elevated permissions.