Enable hermetic mode.

Author: tecarter94

deploy/tasks/buildah-oci-ta.yaml

@@ -524,7 +524,6 @@ spec:
         capabilities:
           add:
             - SETFCAP
-            - NET_ADMIN
     - name: sbom-syft-generate
       image: registry.access.redhat.com/rh-syft-tech-preview/syft-rhel9:1.4.1@sha256:34d7065427085a31dc4949bd283c001b91794d427e1e4cdf1b21ea4faf9fee3f
       workingDir: /var/workdir/source

pkg/reconciler/dependencybuild/buildrecipeyaml.go

@@ -530,6 +530,13 @@ func createPipelineSpec(log logr.Logger, tool string, commitTime int64, jbsConfi
 						StringVal: domainProxyImage,
 					},
 				},
+				{
+					Name: "HERMETIC",
+					Value: tektonpipeline.ParamValue{
+						Type:      tektonpipeline.ParamTypeString,
+						StringVal: "true",
+					},
+				},
 			},
 		}}, ps.Tasks...)