Re: Salsa CI introducing world-writable permissions

Hi, On Sun, 6 Feb 2022, at 15:22, John Goerzen wrote: > In the relevant repo, I could type: > > ``` > $ git ls-tree 91df28f0cc4b0d58cfda57fc1cc5c350bdbaf76d -- service/ > 100644 blob ec429c0bbdb50da81ba0fbef5fc516fc5dc5791f > service/nncp-caller.service > 100644 blob af287bb8255a1fbb774777d56b17

Salsa CI introducing world-writable permissions

Hi folks, I thought I ought to alert people about this, since I haven't seen it documented anywhere. Salsa CI is effectively doing a chmod -R a+w . on trees in checks out, and in some circumstances these permissions can flow into generated data (.debs, Docker images, etc.) I recommend adding a c