fix: mark Tekton source workspace safe for service builds

2026-05-26 13:54:47 +08:00
parent 1d3ecac9d5
commit a97dcc60a7
1 changed files with 1 additions and 0 deletions
@@ -638,6 +638,7 @@ set -eu
 ${dependencyProxyProbeScript("service-image-publish-proxy-preflight", "http://deb.debian.org/debian/dists/bookworm/InRelease")}
 echo '{"event":"ci-base-image","phase":"service-image-publish","serviceId":"'"$(params.service-id)"'","image":"${ciToolsRunnerImage}","policy":"no-runtime-apk"}'
 for tool in node npm git python3 ssh curl; do command -v "$tool" >/dev/null 2>&1 || { echo '{"event":"ci-base-image","phase":"service-image-publish","ok":false,"reason":"missing-tool","tool":"'"$tool"'"}'; exit 31; }; done
+git config --global --add safe.directory /workspace/source/repo
 cd /workspace/source/repo
 test "$(git rev-parse HEAD)" = "$(params.revision)"
 if [ -s /workspace/source/affected-services.json ] && ! node -e 'const fs=require("node:fs"); const p=JSON.parse(fs.readFileSync("/workspace/source/affected-services.json","utf8")); const service=process.argv[1]; const item=(p.entries||[]).find((entry)=>entry.serviceId===service); process.exit(item && item.affected ? 0 : 1);' "$(params.service-id)"; then