Description
This is not an issue yet, but once you update debian to new versions, it will.
Git 2.35.2, released this April, fix a vulnerability CVE-2022-24765 ; it fixes it by requiring the user running git
be the owner of the repo.
This affects go builds, as go run git
to get the vcs for the vcs stamping (since go 1.18); an in this repo, the owner of the repo is different, than user inside the docker container (that is root). (Note, this is not issue on macos hosts, as they do some VM trickery.)
The fix is to use git config --global --add safe.directory <the build folder>
as a command before the build is done. Or maybe even in the Dockerfile itself.
(This is NOT YET and issue for this repo, but might be in the future when you update debian.)