fix ownership after checkout, see actions/checkout#1049

RoboCupAtHome · Mar 15, 2024 · c5de409 · c5de409
1 parent 45c47ab
commit c5de409
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -26,6 +26,13 @@ jobs:
 
     steps:
     - uses: actions/checkout@v4
+
+    - name: Take ownership of the checkout directory (Git CVE-2022-24765)
+      run: chown --recursive --reference=/ .
+
+    - name: Allow for file ownership conflicts with Docker and GitHub Actions
+      run: git config --global --add safe.directory '*'
+
     - name: LaTeX compilation
       run:
         TERM=xterm make ${{ matrix.document }}
@@ -45,6 +52,7 @@ jobs:
     - uses: actions/checkout@v4
       with:
         ref: gh-pages
+
     - name: Download organization
       uses: actions/download-artifact@v4
       with:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -23,6 +23,13 @@ jobs:
     container: texlive/texlive:TL2022-historic
     steps:
     - uses: actions/checkout@v4
+
+    - name: Take ownership of the checkout directory (Git CVE-2022-24765)
+      run: chown --recursive --reference=/ .
+
+    - name: Allow for file ownership conflicts with Docker and GitHub Actions
+      run: git config --global --add safe.directory '*'
+
     - name: LaTeX compilation Organization
       run:
         TERM=xterm make organization