Fix dubious ownership in repository

[winstonsung]

Bug: T314987

Fix fatal: detected dubious ownership in repository at '/github/workspace'

This had caused several CI failures in https://github.com/wikimedia/mediawiki-extensions-Wikibase/actions .

Error: fatal: detected dubious ownership in repository at '/github/workspace'
To add an exception for this directory, call:
git config --global --add safe.directory /github/workspace
Reason: Recent versions of git require the .git folder to be owned
by the same user (see https://github.blog/2022-04-12-git-security-vulnerability-announced/ ).

Related:

• fatal: detected dubious ownership in repository at actions/checkout#1048
• sync_approved_pr: Add git repo to safe dir list espressif/github-actions#36

---

Patchsets:

• patchset 1: 11a8179
• patchset 2: 60aafd5

[winstonsung]

CC @tarrow

[winstonsung]

CC @lucaswerkmeister

[lucaswerkmeister]

Note: We should also add something like “Bug: T314987” to the commit message when merging this change, as I believe this PR will resolve that issue (Wikibase GitHub workflow that extracts library commits is broken).

I’m also not very familiar with how GitHub actions are made (only with how to use them), so it would be great if @tarrow could take a look.

[winstonsung]

(Reminder: Approved but haven't merge.)

[tarrow]

generally looks fine to me; one thought I had was that maybe we ought to instead ensure that the user running git is matching the ownership of this files. I guess this would involve tweaking the container to ensure it was using the same user as the checkout action.

However, I'm not sure this is worth doing if this fix works. It's probably easier to merge this and then test than do anything else so lets go ahead.

Thanks so much for the work @winstonsung :)