The SBOM job encounters permission denied on cache

When running a Golang template 4.1.0 the sbom job fails:

$ cyclonedx-gomod app -json -output reports/go-sbom.cyclonedx.json $GO_SBOM_OPTS
{"level":"error","error":"failed to load package: open /builds/eo-cs/tuleap-import-gforge/.cache/13/135b4b0edceabd21e6bf44f47a3a6698678dbb175df7f39c50b4f8ab23105980-a: permission denied","time":"2023-04-20T09:20:09Z"}

Looking at the images, registry.hub.docker.com/cyclonedx/cyclonedx-gomod:latest is rootless while previous jobs use root images.