Issue #908 - Change owner of CI job checkout directory to deal with s…

…ecurity (#909)
skupperproject · Jan 20, 2023 · cf1e896 · cf1e896
1 parent 01bd599
commit cf1e896
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -727,6 +727,9 @@ jobs:
 
       - uses: actions/checkout@v3
 
+      - name: Take ownership of the checkout directory (Git CVE-2022-24765)
+        run: chown --recursive --reference=/ .
+
       - name: Deploy the spec.rpkg file to /
         run: ln -s packaging/skupper-router.spec.rpkg ./