fatal: unsafe repository ('/github/workspace' is owned by someone else)

[derberg]

Hey, something wrong started happening few hours ago with the action.

• must be related to https://github.blog/2022-04-12-git-security-vulnerability-announced/
• related similar issue fatal: unsafe repository (REPO is owned by someone else) with ubuntu 20.04 container actions/checkout#760
• I test solutions here Update README.md derberg/test-experiment#154

logs:

Cannot find mlc_config.json
NOTE: See https://github.com/tcort/markdown-link-check#config-file-format to know more about
customizing markdown-link-check by using a configuration file.
USE_QUIET_MODE: yes
USE_VERBOSE_MODE: yes
FOLDER_PATH: .
MAX_DEPTH: -1
CHECK_MODIFIED_FILES: yes
FILE_EXTENSION: .md
FILE_PATH: 
BASE_BRANCH: master
fatal: unsafe repository ('/github/workspace' is owned by someone else)
To add an exception for this directory, call:

	git config --global --add safe.directory /github/workspace

I tried a few workarounds but non of them works: https://github.com/derberg/test-experiment/blob/derberg-patch-20/.github/workflows/links.yml#L16-L20

any ideas?

[labeneko]

I resolved this issue temporary 🙇

1. fork this repository
2. add git config --global --add safe.directory /github/workspace to entrypoint.sh
   example: labeneko@2cbe46a
3. fix yml
   - uses: gaurav-nelson/github-action-markdown-link-check@v1 → - uses: {your_repository}/github-action-markdown-link-check@master

[dfarrell07]

There are some more details about this error in a more general context here: actions/checkout#760

[sschuberth]

Hmm, I've upgraded to checkout action v3, and I've also set git config --global --add safe.directory /github/workspace, but I'm still seeing the error. Any hints?

[creachadair]

Hmm, I've upgraded to checkout action v3, and I've also set git config --global --add safe.directory /github/workspace, but I'm still seeing the error. Any hints?

The difficulty for this action is that it runs git inside Docker, so the place where you need to edit the git config is inside the container. That is why the comment above suggests forking this repository (this is what I've done as a workaround as well).

[sschuberth]

The difficulty for this action is that it runs git inside Docker, so the place where you need to edit the git config is inside the container

Thanks, that makes sense for the git config --global --add safe.directory /github/workspace part. But should the upgrade to checkout action v3(.0.1) alone have already fixed the issue?

[sschuberth]

Looks like there's a new issue specifically about failing "in other workflow steps after running checkout".

[nvliyuan]

Hmm, I've upgraded to checkout action v3, and I've also set git config --global --add safe.directory /github/workspace, but I'm still seeing the error. Any hints?

The difficulty for this action is that it runs git inside Docker, so the place where you need to edit the git config is inside the container. That is why the comment above suggests forking this repository (this is what I've done as a workaround as well).

I tried the comment but it seems the markdown link checker cannot access the reference links, any insight?

[creachadair]

I tried the comment but it seems the markdown link checker cannot access the reference links, any insight?

The issue with reference links is not related to the permissions issue, but should be resolved by #129 being merged and released.

[derberg]

ok, I see 7h ago new v1 tag was created that points to a commit with the fix, so closing this one