Only grant privileged to plugins (#1646)

Closes #1525 Co-authored-by: Anbraten <[email protected]>
woodpecker-ci · Mar 19, 2023 · 7ddc183 · 7ddc183
1 parent 51168db
commit 7ddc183
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pipeline/frontend/yaml/compiler/convert.go b/pipeline/frontend/yaml/compiler/convert.go
@@ -84,7 +84,7 @@ func (c *Compiler) createProcess(name string, container *yaml.Container, section
 		}
 	}
 
-	if matchImage(container.Image, c.escalated...) {
+	if matchImage(container.Image, c.escalated...) && container.IsPlugin() {
 		privileged = true
 	}