From 104d60887f550e330e6a0f6a0af0c72016080edc Mon Sep 17 00:00:00 2001 From: Massimiliano Culpo Date: Mon, 9 May 2022 11:11:03 +0200 Subject: CI: fix bootstrapping on Fedora (#30559) Fedora updated git, so we need to apply, again, the workaround for CVE-2022-24765 --- .github/workflows/bootstrap.yml | 6 ++++++ 1 file changed, 6 insertions(+) (limited to '.github') diff --git a/.github/workflows/bootstrap.yml b/.github/workflows/bootstrap.yml index 816940136a..b0885e1ab3 100644 --- a/.github/workflows/bootstrap.yml +++ b/.github/workflows/bootstrap.yml @@ -31,6 +31,12 @@ jobs: bzip2 curl file gcc-c++ gcc gcc-gfortran git gnupg2 gzip \ make patch unzip which xz python3 python3-devel tree \ cmake bison bison-devel libstdc++-static + - name: Work around CVE-2022-24765 + run: | + # See: + # - https://github.blog/2022-04-12-git-security-vulnerability-announced/ + # - https://github.com/actions/checkout/issues/760 + git config --global --add safe.directory /__w/spack/spack - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # @v2 - name: Setup repo and non-root user run: | -- cgit v1.2.3-60-g2f50