Try this

.github/workflows/cicd.yml

@@ -15,8 +15,8 @@ jobs:
       - uses: actions/checkout@v4
       - name: Build Image
         run: docker build -t pgxn-tools-test .
-      - name: Test as root
-        run: "docker run --rm --volume \"$(pwd)/test:/repo\" pgxn-tools-test /repo/runtest.sh ${{ matrix.pg }}"
+      # - name: Test as root
+      #   run: "docker run --rm --volume \"$(pwd)/test:/repo\" pgxn-tools-test /repo/runtest.sh ${{ matrix.pg }}"
       - name: Test as non-root
         run: "docker run --rm --volume \"$(pwd)/test:/repo\" -e AS_USER=worker pgxn-tools-test /repo/runtest.sh ${{ matrix.pg }}"
 

bin/entrypoint.sh

@@ -4,7 +4,7 @@ set -e
 
 # Ensure Git can do stuff in the working directory.
 # https://github.com/pgxn/docker-pgxn-tools/issues/5
-git config --system --add safe.directory "$PWD"
+sh -c "git config --global --add safe.directory $PWD"
 
 # Just continue if unprivileged user not requested.
 [ -z "$AS_USER" ] && exec "$@"

bin/pgxn-bundle

@@ -17,6 +17,9 @@ fi
 DISTNAME=${PGXN_DIST_NAME:-$(perl -MJSON=decode_json -E 'say decode_json(join "", <>)->{name}' META.json)}
 VERSION=${PGXN_DIST_VERSION:-$(perl -MJSON=decode_json -E 'say decode_json(join "", <>)->{version}' META.json)}
 
+echo WHAT IS IN THE SAFE DIRECTORY
+git config safe.directory
+
 # Now bundle up the distribution for release.
 release=${DISTNAME}-${VERSION}
 if [ "true" == "$(git rev-parse --is-inside-work-tree 2>/dev/null)" ]; then