New git CVE changes break this GHA

[KevinJCross]

when using this GHA v1.0.12 we now get

Run UnicornGlobal/[email protected]
/usr/bin/docker run --name b31304f6ab38839452bb44ab0a5eb12df5c_0e9478 --label 294b31 --workdir /github/workspace --rm -e GOROOT -e INPUT_STATUS-ARGS -e INPUT_PATHSPEC -e HOME -e GITHUB_JOB -e GITHUB_REF -e GITHUB_SHA -e GITHUB_REPOSITORY -e GITHUB_REPOSITORY_OWNER -e GITHUB_RUN_ID -e GITHUB_RUN_NUMBER -e GITHUB_RETENTION_DAYS -e GITHUB_RUN_ATTEMPT -e GITHUB_ACTOR -e GITHUB_WORKFLOW -e GITHUB_HEAD_REF -e GITHUB_BASE_REF -e GITHUB_EVENT_NAME -e GITHUB_SERVER_URL -e GITHUB_API_URL -e GITHUB_GRAPHQL_URL -e GITHUB_REF_NAME -e GITHUB_REF_PROTECTED -e GITHUB_REF_TYPE -e GITHUB_WORKSPACE -e GITHUB_ACTION -e GITHUB_EVENT_PATH -e GITHUB_ACTION_REPOSITORY -e GITHUB_ACTION_REF -e GITHUB_PATH -e GITHUB_ENV -e GITHUB_STEP_SUMMARY -e RUNNER_OS -e RUNNER_ARCH -e RUNNER_NAME -e RUNNER_TOOL_CACHE -e RUNNER_TEMP -e RUNNER_WORKSPACE -e ACTIONS_RUNTIME_URL -e ACTIONS_RUNTIME_TOKEN -e ACTIONS_CACHE_URL -e GITHUB_ACTIONS=true -e CI=true -v "/var/run/docker.sock":"/var/run/docker.sock" -v "/home/runner/work/_temp/_github_home":"/github/home" -v "/home/runner/work/_temp/_github_workflow":"/github/workflow" -v "/home/runner/work/_temp/_runner_file_commands":"/github/file_commands" -v "/home/runner/work/app-autoscaler-release/app-autoscaler-release":"/github/workspace" 294b31:304f6ab38839452bb44ab0a5eb12df5c  "" ""
fatal: unsafe repository ('/github/workspace' is owned by someone else)
To add an exception for this directory, call:

	git config --global --add safe.directory /github/workspace

This is the same problem that checkout recently had

[somidad]

Same for me.

[somidad]

@KevinJCross, I am now using below:

https://gist.github.com/somidad/3ce6e8a7b7d77ac8fa7fad583003d6f5

[KevinJCross]

@gsongsong
Thanks its actually simpler than using this GHA 😆 .

[astone123]

@KevinJCross, I am now using below:

https://gist.github.com/gsongsong/3ce6e8a7b7d77ac8fa7fad583003d6f5

- name: Check if there is any change
  id: get_changes
  run: echo "::set-output name=changed::$(git status --porcelain | wc -l)"
- name: Do something if there is any change
  if: steps.get_changes.outputs.changed != 0
  run: do something

This should now be

 - name: Check if there is any change
   id: get_changes
   run: echo "changed=$(git status --porcelain | wc -l)" >> $GITHUB_OUTPUT
 - name: Do something if there is any change
   if: steps.get_changes.outputs.changed != 0
   run: do something

since Github is deprecating set-output in favor of Environment Files