benchmark-action / benchmark-action/github-action-benchmark

"Dubious ownership" Git error on some environments

Open
#150 1 comment 1 reaction 0 assignees View on GitHub
Dominant language
TypeScript
Stars
1.3k
Forks
184
PR merge metrics
No merged PRs in 30d

Description

I'm using this action in a workflow job that runs on a Debian Bullseye Docker container on a GitHub-hosted Ubuntu runner (more precisely, it is configured as `runs-on: ubuntu-latest` and `container: debian:bullseye-slim`).

Hours ago, the Docker image and/or Debian repositories changed so that `apt-get install git` began to install a Git version with a different Debian security patch:

**New version**
![image](https://user-images.githubusercontent.com/7822554/215450081-18e6a854-0c0e-4dbd-a4dd-a3672c1a56f0.png)
**Old version**
![image](https://user-images.githubusercontent.com/7822554/215450173-aaad6eb6-16e1-4365-b773-38e6ba7e3456.png)

I suspect that this new security patch does not play nice with this action and Docker containers, as this error now shows up when running the action, and I wasn't able to identify other relevant environment changes between the latest successful run and the first failed run:

![image](https://user-images.githubusercontent.com/7822554/215450379-f3e08651-e213-454f-90a0-615c8f5db5e0.png)

While I'm not sure whether this action is to blame or not, and [I've already implemented a workaround for this problem in my workflow](https://github.com/ComunidadAylas/PackSquash/commit/120adf9b683b55f34c5ab346cec9e442c8c23f09), the fact that it started happening overnight and other actions work fine suggests that it's likely this action could handle these relatively new Git security features better.

## Additional information

Logs of the first workflow job run that failed: https://github.com/ComunidadAylas/PackSquash/actions/runs/4040805736/jobs/6946994513
Logs of the last workflow job run that succeeded before my workaround: https://github.com/ComunidadAylas/PackSquash/actions/runs/4002307586/jobs/6869604930

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.