fatal: unsafe repository ('/github/workspace' is owned by someone else) about jekyll-deploy-action HOT 10 CLOSED

Hi @MarkChenYutian

Thanks for your issue, this issue is due to the security fix from the Git security vulnerability
recently announced:

https://github.blog/2022-04-12-git-security-vulnerability-announced/.

Relevant GH issue: actions/checkout#760

Thanks & Regards

from jekyll-deploy-action.

Thanks for the quick reply! I've read through the issue you linked in response but still can't figure out a way to resolve this problem. I've added the following steps in the job according to the discussion in the issue:

build_and_deploy:
    runs-on: ubuntu-latest
    steps:
      # ADDED TWO STEPS BELOW
      - name: bypass-security-err
        run: git config --global --add safe.directory /__w/MarkChenYutian/blog
      - name: bypass-security-err-2
        run: git config --global --add safe.directory /github/workspace

      - uses: actions/checkout@v2
      # Use GitHub Actions' cache to cache dependencies on servers
      - uses: actions/cache@v2
        with:
          path: vendor/bundle
          key: ${{ runner.os }}-gems-${{ hashFiles('**/Gemfile.lock') }}
          restore-keys: |
            ${{ runner.os }}-gems-
    ...(omitted)

but it didn't seem to work. Do you have any further suggestions ...?

from jekyll-deploy-action.

Hi @MarkChenYutian

I have fixed this issue, you can try again with the latest version.

Thanks & Regards

from jekyll-deploy-action.

Not working still... Perhaps because the workflow is still using v0.3.1 of jekyll-deploy-action instead of the latest version?

from jekyll-deploy-action.

Hi @MarkChenYutian

Please use actions/checkout@v3 and jekyll-deploy-action@master.

Thanks & Regards

from jekyll-deploy-action.

There's still this fatal error:

fatal: unsafe repository ('/github/workspace/vendor/bundle/ruby/2.7.0/cache/bundler/git/eventmachine-e3d3e89487250965501abc7691f83311d8df32b1' is owned by someone else)

(with checkout@v3 and jekyll-deploy-action@master)

Here's the log: https://github.com/MarkChenYutian/blog/runs/6338487604?check_suite_focus=true

from jekyll-deploy-action.

@MarkChenYutian Just did some changes, please rerun your action again and tell me the result.

from jekyll-deploy-action.

Still failed: https://github.com/MarkChenYutian/blog/runs/6338543771?check_suite_focus=true

from jekyll-deploy-action.

Hi @MarkChenYutian

You can rerun again, I have test, and it's successful.

Thanks & Regards

from jekyll-deploy-action.

Hi @jeffreytse

It worked! Thanks so much for the quick response and all these follow-ups!

So many Thanks!

from jekyll-deploy-action.