github-action-benchmark icon indicating copy to clipboard operation
github-action-benchmark copied to clipboard

"Dubious ownership" Git error on some environments

Open AlexTMjugador opened this issue 2 years ago • 1 comments

I'm using this action in a workflow job that runs on a Debian Bullseye Docker container on a GitHub-hosted Ubuntu runner (more precisely, it is configured as runs-on: ubuntu-latest and container: debian:bullseye-slim).

Hours ago, the Docker image and/or Debian repositories changed so that apt-get install git began to install a Git version with a different Debian security patch:

New version image Old version image

I suspect that this new security patch does not play nice with this action and Docker containers, as this error now shows up when running the action, and I wasn't able to identify other relevant environment changes between the latest successful run and the first failed run:

image

While I'm not sure whether this action is to blame or not, and I've already implemented a workaround for this problem in my workflow, the fact that it started happening overnight and other actions work fine suggests that it's likely this action could handle these relatively new Git security features better.

Additional information

Logs of the first workflow job run that failed: https://github.com/ComunidadAylas/PackSquash/actions/runs/4040805736/jobs/6946994513 Logs of the last workflow job run that succeeded before my workaround: https://github.com/ComunidadAylas/PackSquash/actions/runs/4002307586/jobs/6869604930

AlexTMjugador avatar Jan 30 '23 10:01 AlexTMjugador

actions/checkout did an interesting writeup about this problem in an issue: https://github.com/actions/checkout/issues/766

AlexTMjugador avatar Feb 01 '23 17:02 AlexTMjugador