poutine icon indicating copy to clipboard operation
poutine copied to clipboard

using analyze_local in a container

Open becojo opened this issue 1 year ago • 0 comments

When using analyze_local in a container, git commands may error if the repo is owned by a different user. This commonly happens when mounting a directory into the image

docker run  -it -v $PWD:/app -w /app --entrypoint git ghcr.io/boostsecurityio/poutine:latest log
fatal: detected dubious ownership in repository at '/app'

The poutine image should come with built-in trusted path and document /src to be the preferred path to mount local repositories. Consider trusting /github/workspace too and remove the hack in the poutine Github Action

becojo avatar May 13 '24 15:05 becojo