fix(cnbBuild): do not set supplementary groups for lifecycle (#4675)

Co-authored-by: Johannes Dillmann <[email protected]>
SAP · Nov 14, 2023 · 63b7fd7 · 63b7fd7
1 parent 6e2ecef
commit 63b7fd7
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/cmd/cnbBuild.go b/cmd/cnbBuild.go
@@ -583,8 +583,9 @@ func runCnbBuild(config *cnbBuildOptions, telemetry *buildpacks.Telemetry, image
 	creatorArgs = append(creatorArgs, fmt.Sprintf("%s:%s", containerImage, targetImage.ContainerImageTag))
 	attr := &syscall.SysProcAttr{
 		Credential: &syscall.Credential{
-			Uid: uint32(uid),
-			Gid: uint32(gid),
+			Uid:         uint32(uid),
+			Gid:         uint32(gid),
+			NoSetGroups: true,
 		},
 	}