github-action-benchmark
github-action-benchmark copied to clipboard
"Dubious ownership" Git error on some environments
I'm using this action in a workflow job that runs on a Debian Bullseye Docker container on a GitHub-hosted Ubuntu runner (more precisely, it is configured as runs-on: ubuntu-latest
and container: debian:bullseye-slim
).
Hours ago, the Docker image and/or Debian repositories changed so that apt-get install git
began to install a Git version with a different Debian security patch:
New version
Old version
I suspect that this new security patch does not play nice with this action and Docker containers, as this error now shows up when running the action, and I wasn't able to identify other relevant environment changes between the latest successful run and the first failed run:
While I'm not sure whether this action is to blame or not, and I've already implemented a workaround for this problem in my workflow, the fact that it started happening overnight and other actions work fine suggests that it's likely this action could handle these relatively new Git security features better.
Additional information
Logs of the first workflow job run that failed: https://github.com/ComunidadAylas/PackSquash/actions/runs/4040805736/jobs/6946994513 Logs of the last workflow job run that succeeded before my workaround: https://github.com/ComunidadAylas/PackSquash/actions/runs/4002307586/jobs/6869604930
actions/checkout
did an interesting writeup about this problem in an issue: https://github.com/actions/checkout/issues/766