When using the containerised step group in Cloud Run deploy type, we need to run the container non-privileged, but the download manifests step prevents this as it doesn't honour the step group config. There's also no config option on the step itself to run as a non-root user or non-privileged user.

The Download manifest option should have option to run as non-privileged or non root mode.