From 2b89bcf82b238475fa18437ea8ff35ec9df3079d Mon Sep 17 00:00:00 2001 From: copilotcoder Date: Wed, 1 Jul 2026 18:00:18 -0400 Subject: [PATCH] ci: fix source-check workspace permissions for containers --- .gitea/workflows/cicd-source-checks.yaml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/cicd-source-checks.yaml b/.gitea/workflows/cicd-source-checks.yaml index 05f9abd..9309fd8 100644 --- a/.gitea/workflows/cicd-source-checks.yaml +++ b/.gitea/workflows/cicd-source-checks.yaml @@ -158,7 +158,7 @@ jobs: HEAD_SHA: ${{ needs.setup.outputs.head_sha }} run: | set -e - umask 077 + umask 022 trap 'rm -f ~/.ssh/id_rsa' EXIT mkdir -p ~/.ssh @@ -184,6 +184,9 @@ jobs: exit 1 } + # Ensure containerized checks can read workspace even under rootless/remapped Docker. + chmod -R a+rX backend + - name: Run backend format/lint/type checks run: | set -e @@ -231,7 +234,7 @@ jobs: HEAD_SHA: ${{ needs.setup.outputs.head_sha }} run: | set -e - umask 077 + umask 022 trap 'rm -f ~/.ssh/id_rsa' EXIT mkdir -p ~/.ssh @@ -257,6 +260,9 @@ jobs: exit 1 } + # Ensure containerized checks can read workspace even under rootless/remapped Docker. + chmod -R a+rX frontend + - name: Run frontend format/lint/type checks run: | set -e