ci: Add safe.directory git config

Author: jrosco

.github/workflows/on-pull-request.yaml

@@ -24,6 +24,7 @@ jobs:
           curl -sSL http://ci.q-ctrl.com | bash -
       - name: Ensure no development packages have been set
         run: |
+          git config --global --add safe.directory $GITHUB_WORKSPACE
           /scripts/check-for-internal-versions.sh
   linting:
     # Filter out PRs originating from this repository (triggers on-push.yml instead)
@@ -38,6 +39,7 @@ jobs:
         curl -sSL http://ci.q-ctrl.com | bash -
     - name: Install Python dependencies
       run: |
+        git config --global --add safe.directory $GITHUB_WORKSPACE
         /scripts/install-python-dependencies.sh
     - name: Run Pre-Commit
       run: |
@@ -59,6 +61,7 @@ jobs:
         curl -sSL http://ci.q-ctrl.com | bash -
     - name: Install Python dependencies
       run: |
+        git config --global --add safe.directory $GITHUB_WORKSPACE
         /scripts/install-python-dependencies.sh
     - name: Run Pytest
       run: |

.github/workflows/on-push.yaml

@@ -24,6 +24,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
+          git config --global --add safe.directory $GITHUB_WORKSPACE
           /scripts/housekeeping.sh
 
   linting:
@@ -40,6 +41,7 @@ jobs:
           ./ci vault login -r ${{ secrets.VAULT_ROLE_ID }} -s ${{ secrets.VAULT_SECRET_ID }}
       - name: Install Python dependencies
         run: |
+          git config --global --add safe.directory $GITHUB_WORKSPACE
           /scripts/install-python-dependencies.sh
       - name: Run Pre-Commit
         run: |
@@ -62,13 +64,15 @@ jobs:
           ./ci vault login -r ${{ secrets.VAULT_ROLE_ID }} -s ${{ secrets.VAULT_SECRET_ID }}
       - name: Install Python dependencies
         run: |
+          git config --global --add safe.directory $GITHUB_WORKSPACE
           /scripts/install-python-dependencies.sh
       - name: Run Pytest
         run: |
           /scripts/pytest.sh
 
   publish_internally:
     runs-on: ubuntu-latest
+    container: qctrl/ci-images:python-3.11-ci
     steps:
       - uses: actions/checkout@v4
       - name: Download CI tool
@@ -82,4 +86,5 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
+          git config --global --add safe.directory $GITHUB_WORKSPACE
           /scripts/publish-dev-version.sh

.github/workflows/on-release.yaml

@@ -23,6 +23,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
+          git config --global --add safe.directory $GITHUB_WORKSPACE
           /scripts/housekeeping.sh
       - name: Publish publicly
         env: