From 27bff3341a66801db088bd3ad660e8d3faf35672 Mon Sep 17 00:00:00 2001 From: Alejandro R Mosteo Date: Thu, 23 Jun 2022 11:20:53 +0200 Subject: [PATCH] Disable git check in testing script (#557) * Disable git checks for dir ownership * Document the vulnerabilities requiring the change Co-authored-by: GHA --- scripts/gh-build-crate.sh | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/scripts/gh-build-crate.sh b/scripts/gh-build-crate.sh index 3d63990f..2b6cd3fe 100755 --- a/scripts/gh-build-crate.sh +++ b/scripts/gh-build-crate.sh @@ -9,6 +9,11 @@ set -o nounset # Ensure all alr runs are non-interactive and able to output unexpected errors alias alr="alr -d -n" +# Disable check for ownership that sometimes confuses docker-run git +# Also, Github is not vulnerable to iCVE-2022-24765/CVE-2022-24767, see +# https://github.blog/2022-04-12-git-security-vulnerability-announced/ +git config --global --add safe.directory '*' + # See whats happening git log --graph --decorate --pretty=oneline --abbrev-commit --all | head -30