chore(git_shell): bypass git dubious ownership errors

Dockerfile

@@ -24,5 +24,4 @@ RUN pip install .
 WORKDIR /data
 VOLUME [ "/data" ]
 
-ENTRYPOINT ["/app/docker/entrypoint.sh"]
 CMD ["ggshield"]

changelog.d/20250820_163548_salome.voltz_scrt_5812_investigate_ggshield_running_into_an_ownership_issue_in_git.md

@@ -0,0 +1,42 @@
+<!--
+A new scriv changelog fragment.
+
+Uncomment the section that is right (remove the HTML comment wrapper).
+For top level release notes, leave all the headers commented out.
+-->
+
+<!--
+### Removed
+
+- A bullet item for the Removed category.
+
+-->
+<!--
+### Added
+
+- A bullet item for the Added category.
+
+-->
+
+### Fixed
+
+- Bypass git dubious ownership errors by default.
+
+<!--
+### Deprecated
+
+- A bullet item for the Deprecated category.
+
+-->
+<!--
+### Fixed
+
+- A bullet item for the Fixed category.
+
+-->
+<!--
+### Security
+
+- A bullet item for the Security category.
+
+-->

docker/actions-secret-entrypoint.sh

@@ -1,4 +1,4 @@
 #!/usr/bin/env bash
 set -euo pipefail
 args=("$@")
-exec /app/docker/entrypoint.sh ggshield secret scan -v ${args[@]} ci
+exec ggshield secret scan -v ${args[@]} ci

ggshield/utils/git_shell.py

@@ -214,7 +214,13 @@ def git(
         logger.debug("command=%s timeout=%d", command, timeout)
         result = subprocess.run(
             (
-                [_get_git_path(), "-c", "core.quotePath=false"]
+                [
+                    _get_git_path(),
+                    "-c",
+                    "core.quotePath=false",
+                    "-c",
+                    "safe.directory=*",
+                ]
                 + (
                     ["-c", "core.longpaths=true"]
                     if platform.system() == "Windows"