From 29f4fb6bd311cffddaa7b914f73b774a0140dda5 Mon Sep 17 00:00:00 2001 From: rht Date: Thu, 14 Apr 2022 18:23:17 -0400 Subject: [PATCH] fix: Address GitHub workaround for CVE-2022-24765. This commit: - updates GH Actions checkout to v3 - apply additional work around stated in https://github.com/actions/checkout/issues/766 This fixes the problem with the following error message: ``` fatal: unsafe repository ('/github/workspace' is owned by someone else) To add an exception for this directory, call: git config --global --add safe.directory /github/workspace ``` The problem is due to the security fix from the Git security vulnerability recently announced: https://github.blog/2022-04-12-git-security-vulnerability-announced/. Relevant GH issue: https://github.com/actions/checkout/issues/760 --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 8c60029896e1559..e13f4e8c26ee9a8 100644 --- a/README.md +++ b/README.md @@ -97,7 +97,7 @@ jobs: name: A job to publish zulip-archive in GitHub pages steps: - name: Checkout - uses: actions/checkout@v1 + uses: actions/checkout@v3 - name: Run archive id: archive uses: zulip/zulip-archive@master