v1.31.2 safe-directory -> git-safe-directory
Previously, there was a make
target named safe-directory
which effectively restored the vulnerability (CVE-2022-24765) that was mitigated in git
v2.35.2. In this release, we replace that with git-safe-directory
which only operates on $GITHUB_WORKSPACE
which is set when running on a GitHub Action Runner and which is expected to need to be trusted.