Try without hermetic.

Author: tecarter94

deploy/tasks/buildah-oci-ta.yaml

@@ -405,12 +405,13 @@ spec:
             unshare -Ufp --keep-caps -r --map-users 1,1,65536 --map-groups 1,1,65536 -- buildah pull $image
           done
           echo "Build will be executed with network isolation"
-          if [ "${DOMAIN_PROXY}" == "true" ]; then
-            use_domain_proxy=true
-            echo "Build will be executed with domain proxy"
-            /app/domain-proxy-server-runner &
-            server_pid=$!
-          fi
+        fi
+
+        if [ "${DOMAIN_PROXY}" == "true" ]; then
+          use_domain_proxy=true
+          echo "Build will be executed with domain proxy"
+          /app/domain-proxy-server-runner &
+          server_pid=$!
         fi
 
         if [ -n "${TARGET_STAGE}" ]; then

pkg/reconciler/dependencybuild/buildrecipeyaml.go

@@ -535,7 +535,7 @@ func createPipelineSpec(log logr.Logger, tool string, commitTime int64, jbsConfi
 					Name: "HERMETIC",
 					Value: tektonpipeline.ParamValue{
 						Type:      tektonpipeline.ParamTypeString,
-						StringVal: "true",
+						StringVal: "false",
 					},
 				},
 				{