Merge pull request #105 from cyberark/fix-goreleaser

Apply CVE-2022-24765 workaround for git run in container
cyberark · May 19, 2022 · daddb10 · daddb10
2 parents cd8fa8b + 6f7d85a
commit daddb10
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/build.sh b/build.sh
@@ -16,6 +16,9 @@ docker run --rm -t \
   --entrypoint "/sbin/tini" \
   -v "$CURRENT_DIR:$MOUNT_DIR" \
   -w "$MOUNT_DIR" \
-  "${GORELEASER_IMAGE}" -- sh -c "/entrypoint.sh --rm-dist $@ && rm ./dist/goreleaser/artifacts.json"
+  "${GORELEASER_IMAGE}" \
+  -- sh -c "git config --global --add safe.directory $MOUNT_DIR && \
+    /entrypoint.sh --rm-dist $@ && \
+    rm ./dist/goreleaser/artifacts.json"
 
 echo "Releases built. Archives can be found in dist/goreleaser"