benchmark-action / benchmark-action/github-action-benchmark
"Dubious ownership" Git error on some environments
- Dominant language
- TypeScript
- Stars
- 1.3k
- Forks
- 184
- PR merge metrics
- No merged PRs in 30d
Description
I'm using this action in a workflow job that runs on a Debian Bullseye Docker container on a GitHub-hosted Ubuntu runner (more precisely, it is configured as `runs-on: ubuntu-latest` and `container: debian:bullseye-slim`).
Hours ago, the Docker image and/or Debian repositories changed so that `apt-get install git` began to install a Git version with a different Debian security patch:
**New version**

**Old version**

I suspect that this new security patch does not play nice with this action and Docker containers, as this error now shows up when running the action, and I wasn't able to identify other relevant environment changes between the latest successful run and the first failed run:

While I'm not sure whether this action is to blame or not, and [I've already implemented a workaround for this problem in my workflow](https://github.com/ComunidadAylas/PackSquash/commit/120adf9b683b55f34c5ab346cec9e442c8c23f09), the fact that it started happening overnight and other actions work fine suggests that it's likely this action could handle these relatively new Git security features better.
## Additional information
Logs of the first workflow job run that failed: https://github.com/ComunidadAylas/PackSquash/actions/runs/4040805736/jobs/6946994513
Logs of the last workflow job run that succeeded before my workaround: https://github.com/ComunidadAylas/PackSquash/actions/runs/4002307586/jobs/6869604930
Contributor guide
Assessment
This issue has not been assessed yet.