poutine
poutine copied to clipboard
using analyze_local in a container
When using analyze_local in a container, git commands may error if the repo is owned by a different user. This commonly happens when mounting a directory into the image
docker run -it -v $PWD:/app -w /app --entrypoint git ghcr.io/boostsecurityio/poutine:latest log
fatal: detected dubious ownership in repository at '/app'
The poutine image should come with built-in trusted path and document /src to be the preferred path to mount local repositories. Consider trusting /github/workspace too and remove the hack in the poutine Github Action