Skip to content

go vcs stamping will break with new git #232

Open
arduino/uno-r4-wifi-fwuploader-plugin
#5
@igor-hnizdo

Description

@igor-hnizdo

This is not an issue yet, but once you update debian to new versions, it will.

Git 2.35.2, released this April, fix a vulnerability CVE-2022-24765 ; it fixes it by requiring the user running git be the owner of the repo.

This affects go builds, as go run git to get the vcs for the vcs stamping (since go 1.18); an in this repo, the owner of the repo is different, than user inside the docker container (that is root). (Note, this is not issue on macos hosts, as they do some VM trickery.)

The fix is to use git config --global --add safe.directory <the build folder> as a command before the build is done. Or maybe even in the Dockerfile itself.

(This is NOT YET and issue for this repo, but might be in the future when you update debian.)

Metadata

Metadata

Assignees

No one assigned

    Labels

    Team:AutomationLabel for the Observability productivity team

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions