Skip to content

Conversation

@mszostok
Copy link
Owner

@mszostok mszostok commented Apr 14, 2022

Description

Changes proposed in this pull request:

Because of the security vulnerability fix (https://github.blog/2022-04-12-git-security-vulnerability-announced/), the not-owned check exists with error:

==> Executing [Experimental] Not Owned File Checker (1.584027ms)
    [Internal Error] fatal: unsafe repository ('/github/workspace' is owned by someone else)
To add an exception for this directory, call:

	git config --global --add safe.directory /github/workspace
: command "git": exit status 128

Issue affects the GitHub Actions that use container because the container runs as a different user that the user from the VM, and the checkout runs natively on VM, see: actions/checkout#760 (comment)

As a "hot-fix" we can simply trust a given repository. I will monitor the actions/checkout#766 issue and check if there will be some official guidelines on how to approach that or maybe GitHub will solve it natively.

@mszostok mszostok force-pushed the hotfix-git branch 4 times, most recently from 948bc70 to 4b1beee Compare April 15, 2022 11:08
@mszostok mszostok merged commit d1be488 into main Apr 15, 2022
@mszostok mszostok deleted the hotfix-git branch April 15, 2022 21:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants