From a97dcc60a7ec3525a994ec4270d3e1cf25f0da36 Mon Sep 17 00:00:00 2001 From: Codex Date: Tue, 26 May 2026 13:54:47 +0800 Subject: [PATCH] fix: mark Tekton source workspace safe for service builds --- scripts/g14-gitops-render.mjs | 1 + 1 file changed, 1 insertion(+) diff --git a/scripts/g14-gitops-render.mjs b/scripts/g14-gitops-render.mjs index 31bff330..2c139c98 100644 --- a/scripts/g14-gitops-render.mjs +++ b/scripts/g14-gitops-render.mjs @@ -638,6 +638,7 @@ set -eu ${dependencyProxyProbeScript("service-image-publish-proxy-preflight", "http://deb.debian.org/debian/dists/bookworm/InRelease")} echo '{"event":"ci-base-image","phase":"service-image-publish","serviceId":"'"$(params.service-id)"'","image":"${ciToolsRunnerImage}","policy":"no-runtime-apk"}' for tool in node npm git python3 ssh curl; do command -v "$tool" >/dev/null 2>&1 || { echo '{"event":"ci-base-image","phase":"service-image-publish","ok":false,"reason":"missing-tool","tool":"'"$tool"'"}'; exit 31; }; done +git config --global --add safe.directory /workspace/source/repo cd /workspace/source/repo test "$(git rev-parse HEAD)" = "$(params.revision)" if [ -s /workspace/source/affected-services.json ] && ! node -e 'const fs=require("node:fs"); const p=JSON.parse(fs.readFileSync("/workspace/source/affected-services.json","utf8")); const service=process.argv[1]; const item=(p.entries||[]).find((entry)=>entry.serviceId===service); process.exit(item && item.affected ? 0 : 1);' "$(params.service-id)"; then