Merge pull request #53 from coveo/fix/DT-7252-codeql-java-git-dir-per…

…mission fix: Add git safe directory
coveo · Oct 7, 2024 · 97d2b0b · 97d2b0b
2 parents 4386cde + 88c4fc9
commit 97d2b0b
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/java-maven-openjdk-codeql.yml b/.github/workflows/java-maven-openjdk-codeql.yml
@@ -40,6 +40,11 @@ jobs:
       security-events: write
 
     steps:
+      # Allow calling Git on a working copy owned by another user than the current one.
+      # see: https://github.blog/2022-04-12-git-security-vulnerability-announced/
+      - name: Git directory permission fix
+        run: git config --global --add safe.directory $GITHUB_WORKSPACE
+
       # Fix HOME variable as GitHub is overriding it, and it breaks assumptions from maven.
       - run: echo "HOME=/root" >> $GITHUB_ENV