summaryrefslogtreecommitdiffstats
path: root/test
diff options
context:
space:
mode:
authorJesse Duffield <jessedduffield@gmail.com>2022-11-12 10:18:02 +1100
committerJesse Duffield <jessedduffield@gmail.com>2022-11-12 10:53:12 +1100
commit52316e628e651dc038a9c04ab6fd262aabcf60cb (patch)
treeb8cc715d0251d8631d51b1bde6e7b2291129b26b /test
parente8b97c9fe2db8d39084789a8503db4cbadcdde42 (diff)
fix broken CI (see https://vielmetti.typepad.com/logbook/2022/10/git-security-fixes-lead-to-fatal-transport-file-not-allowed-error-in-ci-systems-cve-2022-39253.html)
try this WIP
Diffstat (limited to 'test')
-rw-r--r--test/integration/submoduleAdd/setup.sh5
-rw-r--r--test/integration/submoduleEnter/setup.sh2
-rw-r--r--test/integration/submoduleRemove/setup.sh2
-rw-r--r--test/integration/submoduleReset/setup.sh2
4 files changed, 8 insertions, 3 deletions
diff --git a/test/integration/submoduleAdd/setup.sh b/test/integration/submoduleAdd/setup.sh
index 47c92bd27..35a139f79 100644
--- a/test/integration/submoduleAdd/setup.sh
+++ b/test/integration/submoduleAdd/setup.sh
@@ -11,6 +11,11 @@ git init
git config user.email "CI@example.com"
git config user.name "CI"
+# see https://vielmetti.typepad.com/logbook/2022/10/git-security-fixes-lead-to-fatal-transport-file-not-allowed-error-in-ci-systems-cve-2022-39253.html
+# NOTE: I don't think this actually works if it's only applied to the repo.
+# On CI we set the global setting, but given it's a security concern I don't want
+# people to do that for their locals.
+git config protocol.file.allow always
echo test1 > myfile1
git add .
diff --git a/test/integration/submoduleEnter/setup.sh b/test/integration/submoduleEnter/setup.sh
index 307593a71..a38c6045b 100644
--- a/test/integration/submoduleEnter/setup.sh
+++ b/test/integration/submoduleEnter/setup.sh
@@ -26,5 +26,5 @@ cd ..
git clone --bare ./repo other_repo
cd repo
-git submodule add ../other_repo
+git -c protocol.file.allow=always submodule add ../other_repo
git commit -am "add submodule"
diff --git a/test/integration/submoduleRemove/setup.sh b/test/integration/submoduleRemove/setup.sh
index 2525abf31..cd5b3ce64 100644
--- a/test/integration/submoduleRemove/setup.sh
+++ b/test/integration/submoduleRemove/setup.sh
@@ -23,5 +23,5 @@ cd ..
git clone --bare ./repo other_repo
cd repo
-git submodule add ../other_repo
+git -c protocol.file.allow=always submodule add ../other_repo
git commit -am "add submodule"
diff --git a/test/integration/submoduleReset/setup.sh b/test/integration/submoduleReset/setup.sh
index 2525abf31..cd5b3ce64 100644
--- a/test/integration/submoduleReset/setup.sh
+++ b/test/integration/submoduleReset/setup.sh
@@ -23,5 +23,5 @@ cd ..
git clone --bare ./repo other_repo
cd repo
-git submodule add ../other_repo
+git -c protocol.file.allow=always submodule add ../other_repo
git commit -am "add submodule"