Merge pull request #434 from gardar/avoid-elevated-privileges

fix: prevent local binary cache creation with elevated privileges
prometheus-community · Oct 18, 2024 · 5c2049c · 5c2049c
2 parents 4670e4a + e3d715d
commit 5c2049c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/roles/_common/tasks/install.yml b/roles/_common/tasks/install.yml
@@ -53,6 +53,7 @@
     mode: 0755
   delegate_to: localhost
   check_mode: false
+  become: false
   tags:
     - "{{ ansible_parent_role_names | first | regex_replace(ansible_collection_name ~ '.', '') }}"
     - install
@@ -67,6 +68,7 @@
     - "{{ ansible_parent_role_names | first | regex_replace(ansible_collection_name ~ '.', '') }}_install"
     - download
     - "{{ ansible_parent_role_names | first | regex_replace(ansible_collection_name ~ '.', '') }}_download"
+  become: false
   block:
     - name: "Get checksum list for {{ __common_binary_basename }}"
       ansible.builtin.set_fact: