anchor.diff:  ADD https://github.com/GoogleCloudPlatform/docker-credential-gcr/releases/download/v${GCR_AUTH_VERSION}/docker-credential-gcr_linux_amd64-${GCR_AUTH_VERSION}.tar.gz /tmp
   RUN tar -xzf /tmp/docker-credential-gcr_linux_amd64-${GCR_AUTH_VERSION}.tar.gz -C /tmp
   RUN mv /tmp/docker-credential-gcr ${OUTDIR}/usr/bin
  +
  +# Install su-exec which is a tool that operates like sudo without the overhead
  +ADD https://github.com/ncopa/su-exec/archive/v0.2.tar.gz /tmp
  +RUN tar -xzvf v${SU_EXEC_VERSION}.tar.gz
  +WORKDIR /tmp/su-exec-${SU_EXEC_VERSION}
  +RUN make
  +RUN cp -a su-exec ${OUTDIR}/usr/bin
  +RUN chmod u+s ${OUTDIR}/usr/bin/su-exec
   
   # Cleanup stuff we don't need in the final image
   RUN rm -fr /usr/local/go/doc
  
positive.code: ENV PROTOLOCK_VERSION=v0.14.0
  ENV PROTOTOOL_VERSION=7df3b957ffe3d09dc57fe4e1eb96694614db8c7a
  ENV SHELLCHECK_VERSION=v0.7.0
  ENV UPX_VERSION=3.95
  ENV KIND_VERSION=v0.5.1
  ENV GCR_AUTH_VERSION=1.5.0
  
  WORKDIR /tmp
  ENV GOPATH=/tmp/go
  
negative.code: # hadolint ignore=DL3008
  RUN apt-get update && apt-get install -y --no-install-recommends \
      apt-transport-https \
      build-essential \
      ca-certificates \
      curl \
      gnupg2 \
  