Add repo root as safe directory on git client creation #9033

daniel-mohedano · 2025-06-25T10:27:36Z

What Does This Do

On shell git client creation, it configures the repository root provided as a safe directory.

Motivation

Some CI providers checkout repositories as one user but run the CI jobs as a different user. This can cause a detected dubious ownership in repository at ... error to be emitted when trying to run git CLI commands.

Additional Notes

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the CODEOWNERS file on source file addition, move, or deletion
Update the public documentation in case of new configuration flag or behavior

pr-commenter · 2025-06-25T10:57:20Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	daniel.mohedano/git-config-safe-directory
git_commit_date	1750926861	1750927221
git_commit_sha	`ae1f104`	`6f1ed2c`
release_version	1.51.0-SNAPSHOT~ae1f104361	1.51.0-SNAPSHOT~6f1ed2c6da

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1750928994	1750928994
ci_job_id	999580171	999580171
ci_pipeline_id	68824554	68824554
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-ltijhv1y-project-304-concurrent-0-r7xs615l 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-ltijhv1y-project-304-concurrent-0-r7xs615l 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 46 metrics, 7 unstable metrics.

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.51.0-SNAPSHOT~6f1ed2c6da, baseline=1.51.0-SNAPSHOT~ae1f104361

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (997.341 ms) : 0, 997341
Total [baseline] (10.747 s) : 0, 10747456
Agent [candidate] (995.027 ms) : 0, 995027
Total [candidate] (10.804 s) : 0, 10804080
section appsec
Agent [baseline] (1.178 s) : 0, 1177817
Total [baseline] (10.818 s) : 0, 10818179
Agent [candidate] (1.183 s) : 0, 1182736
Total [candidate] (10.837 s) : 0, 10836867
section iast
Agent [baseline] (1.131 s) : 0, 1130724
Total [baseline] (10.833 s) : 0, 10832943
Agent [candidate] (1.138 s) : 0, 1138481
Total [candidate] (10.868 s) : 0, 10868114
section profiling
Agent [baseline] (1.247 s) : 0, 1246794
Total [baseline] (10.996 s) : 0, 10995867
Agent [candidate] (1.248 s) : 0, 1248419
Total [candidate] (11.084 s) : 0, 11083578

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	997.341 ms	-
Agent	appsec	1.178 s	180.476 ms (18.1%)
Agent	iast	1.131 s	133.383 ms (13.4%)
Agent	profiling	1.247 s	249.453 ms (25.0%)
Total	tracing	10.747 s	-
Total	appsec	10.818 s	70.724 ms (0.7%)
Total	iast	10.833 s	85.487 ms (0.8%)
Total	profiling	10.996 s	248.412 ms (2.3%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	995.027 ms	-
Agent	appsec	1.183 s	187.71 ms (18.9%)
Agent	iast	1.138 s	143.454 ms (14.4%)
Agent	profiling	1.248 s	253.392 ms (25.5%)
Total	tracing	10.804 s	-
Total	appsec	10.837 s	32.788 ms (0.3%)
Total	iast	10.868 s	64.034 ms (0.6%)
Total	profiling	11.084 s	279.499 ms (2.6%)

gantt
    title petclinic - break down per module: candidate=1.51.0-SNAPSHOT~6f1ed2c6da, baseline=1.51.0-SNAPSHOT~ae1f104361

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (687.845 ms) : 0, 687845
BytebuddyAgent [candidate] (686.321 ms) : 0, 686321
GlobalTracer [baseline] (243.01 ms) : 0, 243010
GlobalTracer [candidate] (242.617 ms) : 0, 242617
AppSec [baseline] (30.549 ms) : 0, 30549
AppSec [candidate] (30.329 ms) : 0, 30329
Debugger [baseline] (6.062 ms) : 0, 6062
Debugger [candidate] (6.038 ms) : 0, 6038
Remote Config [baseline] (677.04 µs) : 0, 677
Remote Config [candidate] (675.953 µs) : 0, 676
Telemetry [baseline] (8.301 ms) : 0, 8301
Telemetry [candidate] (8.169 ms) : 0, 8169
section appsec
BytebuddyAgent [baseline] (712.377 ms) : 0, 712377
BytebuddyAgent [candidate] (716.131 ms) : 0, 716131
GlobalTracer [baseline] (237.525 ms) : 0, 237525
GlobalTracer [candidate] (237.628 ms) : 0, 237628
AppSec [baseline] (170.382 ms) : 0, 170382
AppSec [candidate] (170.965 ms) : 0, 170965
Debugger [baseline] (5.817 ms) : 0, 5817
Debugger [candidate] (5.861 ms) : 0, 5861
Remote Config [baseline] (612.089 µs) : 0, 612
Remote Config [candidate] (620.205 µs) : 0, 620
Telemetry [baseline] (8.064 ms) : 0, 8064
Telemetry [candidate] (8.237 ms) : 0, 8237
IAST [baseline] (22.192 ms) : 0, 22192
IAST [candidate] (22.343 ms) : 0, 22343
section iast
BytebuddyAgent [baseline] (807.145 ms) : 0, 807145
BytebuddyAgent [candidate] (812.771 ms) : 0, 812771
GlobalTracer [baseline] (232.974 ms) : 0, 232974
GlobalTracer [candidate] (234.56 ms) : 0, 234560
AppSec [baseline] (26.74 ms) : 0, 26740
AppSec [candidate] (26.992 ms) : 0, 26992
Debugger [baseline] (5.819 ms) : 0, 5819
Debugger [candidate] (5.873 ms) : 0, 5873
Remote Config [baseline] (581.082 µs) : 0, 581
Remote Config [candidate] (595.738 µs) : 0, 596
Telemetry [baseline] (7.978 ms) : 0, 7978
Telemetry [candidate] (8.01 ms) : 0, 8010
IAST [baseline] (28.7 ms) : 0, 28700
IAST [candidate] (28.799 ms) : 0, 28799
section profiling
BytebuddyAgent [baseline] (679.653 ms) : 0, 679653
BytebuddyAgent [candidate] (677.936 ms) : 0, 677936
GlobalTracer [baseline] (362.195 ms) : 0, 362195
GlobalTracer [candidate] (363.25 ms) : 0, 363250
AppSec [baseline] (31.639 ms) : 0, 31639
AppSec [candidate] (31.131 ms) : 0, 31131
Debugger [baseline] (10.608 ms) : 0, 10608
Debugger [candidate] (12.182 ms) : 0, 12182
Remote Config [baseline] (663.698 µs) : 0, 664
Remote Config [candidate] (670.993 µs) : 0, 671
Telemetry [baseline] (10.243 ms) : 0, 10243
Telemetry [candidate] (8.966 ms) : 0, 8966
ProfilingAgent [baseline] (103.148 ms) : 0, 103148
ProfilingAgent [candidate] (104.92 ms) : 0, 104920
Profiling [baseline] (103.173 ms) : 0, 103173
Profiling [candidate] (104.944 ms) : 0, 104944

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.51.0-SNAPSHOT~6f1ed2c6da, baseline=1.51.0-SNAPSHOT~ae1f104361

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.006 s) : 0, 1005539
Total [baseline] (8.592 s) : 0, 8592310
Agent [candidate] (1.003 s) : 0, 1002685
Total [candidate] (8.56 s) : 0, 8559518
section iast
Agent [baseline] (1.14 s) : 0, 1139848
Total [baseline] (9.329 s) : 0, 9329494
Agent [candidate] (1.136 s) : 0, 1136151
Total [candidate] (9.31 s) : 0, 9309530

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.006 s	-
Agent	iast	1.14 s	134.309 ms (13.4%)
Total	tracing	8.592 s	-
Total	iast	9.329 s	737.184 ms (8.6%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.003 s	-
Agent	iast	1.136 s	133.466 ms (13.3%)
Total	tracing	8.56 s	-
Total	iast	9.31 s	750.011 ms (8.8%)

gantt
    title insecure-bank - break down per module: candidate=1.51.0-SNAPSHOT~6f1ed2c6da, baseline=1.51.0-SNAPSHOT~ae1f104361

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (694.101 ms) : 0, 694101
BytebuddyAgent [candidate] (692.547 ms) : 0, 692547
GlobalTracer [baseline] (244.699 ms) : 0, 244699
GlobalTracer [candidate] (243.658 ms) : 0, 243658
AppSec [baseline] (30.717 ms) : 0, 30717
AppSec [candidate] (30.508 ms) : 0, 30508
Debugger [baseline] (6.116 ms) : 0, 6116
Debugger [candidate] (6.102 ms) : 0, 6102
Remote Config [baseline] (674.005 µs) : 0, 674
Remote Config [candidate] (678.521 µs) : 0, 679
Telemetry [baseline] (8.323 ms) : 0, 8323
Telemetry [candidate] (8.255 ms) : 0, 8255
section iast
BytebuddyAgent [baseline] (813.989 ms) : 0, 813989
BytebuddyAgent [candidate] (810.137 ms) : 0, 810137
GlobalTracer [baseline] (234.387 ms) : 0, 234387
GlobalTracer [candidate] (234.797 ms) : 0, 234797
AppSec [baseline] (31.207 ms) : 0, 31207
AppSec [candidate] (27.054 ms) : 0, 27054
Debugger [baseline] (5.871 ms) : 0, 5871
Debugger [candidate] (5.903 ms) : 0, 5903
Remote Config [baseline] (587.693 µs) : 0, 588
Remote Config [candidate] (594.626 µs) : 0, 595
Telemetry [baseline] (8.08 ms) : 0, 8080
Telemetry [candidate] (8.043 ms) : 0, 8043
IAST [baseline] (24.782 ms) : 0, 24782
IAST [candidate] (28.82 ms) : 0, 28820

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	daniel.mohedano/git-config-safe-directory
git_commit_date	1750926861	1750927221
git_commit_sha	`ae1f104`	`6f1ed2c`
release_version	1.51.0-SNAPSHOT~ae1f104361	1.51.0-SNAPSHOT~6f1ed2c6da

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1750928689	1750928689
ci_job_id	999580173	999580173
ci_pipeline_id	68824554	68824554
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-iun2vzqu-project-304-concurrent-1-42zje4ff 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-iun2vzqu-project-304-concurrent-1-42zje4ff 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 3 performance improvements and 1 performance regressions! Performance is the same for 8 metrics, 12 unstable metrics.

scenario	Δ mean http_req_duration	Δ mean throughput	candidate mean http_req_duration	candidate mean throughput	baseline mean http_req_duration	baseline mean throughput
scenario:load:insecure-bank:no_agent:high_load	better [-242.351µs; -128.735µs] or [-5.375%; -2.855%]	unstable [-78.898op/s; +164.586op/s] or [-7.747%; +16.160%]	4.323ms	1061.344op/s	4.509ms	1018.500op/s
scenario:load:insecure-bank:tracing:high_load	better [-538.895µs; -304.557µs] or [-6.850%; -3.871%]	unstable [-43.820op/s; +109.820op/s] or [-7.442%; +18.650%]	7.446ms	621.844op/s	7.867ms	588.844op/s
scenario:load:petclinic:code_origins:high_load	worse [+1.455ms; +2.302ms] or [+3.228%; +5.107%]	unstable [-10.897op/s; +2.647op/s] or [-10.505%; +2.552%]	46.965ms	99.600op/s	45.086ms	103.725op/s
scenario:load:petclinic:appsec:high_load	better [-2.370ms; -1.424ms] or [-4.690%; -2.818%]	unstable [-2.891op/s; +10.091op/s] or [-3.122%; +10.900%]	48.642ms	96.175op/s	50.539ms	92.575op/s

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.51.0-SNAPSHOT~6f1ed2c6da, baseline=1.51.0-SNAPSHOT~ae1f104361
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.509 ms) : 4456, 4561
.   : milestone, 4509,
iast (9.184 ms) : 9033, 9336
.   : milestone, 9184,
iast_FULL (13.511 ms) : 13247, 13775
.   : milestone, 13511,
iast_GLOBAL (9.979 ms) : 9806, 10152
.   : milestone, 9979,
profiling (8.719 ms) : 8588, 8850
.   : milestone, 8719,
tracing (7.867 ms) : 7755, 7980
.   : milestone, 7867,
section candidate
no_agent (4.323 ms) : 4270, 4376
.   : milestone, 4323,
iast (9.405 ms) : 9249, 9560
.   : milestone, 9405,
iast_FULL (13.707 ms) : 13438, 13976
.   : milestone, 13707,
iast_GLOBAL (10.207 ms) : 10018, 10395
.   : milestone, 10207,
profiling (8.935 ms) : 8789, 9081
.   : milestone, 8935,
tracing (7.446 ms) : 7340, 7551
.   : milestone, 7446,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.509 ms [4.456 ms, 4.561 ms]	-
iast	9.184 ms [9.033 ms, 9.336 ms]	4.676 ms (103.7%)
iast_FULL	13.511 ms [13.247 ms, 13.775 ms]	9.002 ms (199.7%)
iast_GLOBAL	9.979 ms [9.806 ms, 10.152 ms]	5.47 ms (121.3%)
profiling	8.719 ms [8.588 ms, 8.85 ms]	4.21 ms (93.4%)
tracing	7.867 ms [7.755 ms, 7.98 ms]	3.359 ms (74.5%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.323 ms [4.27 ms, 4.376 ms]	-
iast	9.405 ms [9.249 ms, 9.56 ms]	5.082 ms (117.5%)
iast_FULL	13.707 ms [13.438 ms, 13.976 ms]	9.384 ms (217.1%)
iast_GLOBAL	10.207 ms [10.018 ms, 10.395 ms]	5.883 ms (136.1%)
profiling	8.935 ms [8.789 ms, 9.081 ms]	4.612 ms (106.7%)
tracing	7.446 ms [7.34 ms, 7.551 ms]	3.122 ms (72.2%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.51.0-SNAPSHOT~6f1ed2c6da, baseline=1.51.0-SNAPSHOT~ae1f104361
    dateFormat X
    axisFormat %s
section baseline
no_agent (38.19 ms) : 37882, 38498
.   : milestone, 38190,
appsec (50.539 ms) : 50088, 50990
.   : milestone, 50539,
code_origins (45.086 ms) : 44704, 45469
.   : milestone, 45086,
iast (43.822 ms) : 43428, 44216
.   : milestone, 43822,
profiling (47.461 ms) : 47001, 47922
.   : milestone, 47461,
tracing (42.29 ms) : 41951, 42629
.   : milestone, 42290,
section candidate
no_agent (38.07 ms) : 37772, 38369
.   : milestone, 38070,
appsec (48.642 ms) : 48214, 49070
.   : milestone, 48642,
code_origins (46.965 ms) : 46561, 47370
.   : milestone, 46965,
iast (44.067 ms) : 43680, 44454
.   : milestone, 44067,
profiling (48.706 ms) : 48241, 49170
.   : milestone, 48706,
tracing (43.171 ms) : 42825, 43517
.   : milestone, 43171,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	38.19 ms [37.882 ms, 38.498 ms]	-
appsec	50.539 ms [50.088 ms, 50.99 ms]	12.349 ms (32.3%)
code_origins	45.086 ms [44.704 ms, 45.469 ms]	6.896 ms (18.1%)
iast	43.822 ms [43.428 ms, 44.216 ms]	5.632 ms (14.7%)
profiling	47.461 ms [47.001 ms, 47.922 ms]	9.272 ms (24.3%)
tracing	42.29 ms [41.951 ms, 42.629 ms]	4.1 ms (10.7%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	38.07 ms [37.772 ms, 38.369 ms]	-
appsec	48.642 ms [48.214 ms, 49.07 ms]	10.572 ms (27.8%)
code_origins	46.965 ms [46.561 ms, 47.37 ms]	8.895 ms (23.4%)
iast	44.067 ms [43.68 ms, 44.454 ms]	5.997 ms (15.8%)
profiling	48.706 ms [48.241 ms, 49.17 ms]	10.635 ms (27.9%)
tracing	43.171 ms [42.825 ms, 43.517 ms]	5.101 ms (13.4%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	daniel.mohedano/git-config-safe-directory
git_commit_date	1750926861	1750927221
git_commit_sha	`ae1f104`	`6f1ed2c`
release_version	1.51.0-SNAPSHOT~ae1f104361	1.51.0-SNAPSHOT~6f1ed2c6da

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1750929082	1750929082
ci_job_id	999580174	999580174
ci_pipeline_id	68824554	68824554
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-ltijhv1y-project-304-concurrent-3-jdlspsxs 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-ltijhv1y-project-304-concurrent-3-jdlspsxs 6.8.0-1029-aws #31~22.04.1-Ubuntu SMP Thu Apr 24 21:16:18 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.51.0-SNAPSHOT~6f1ed2c6da, baseline=1.51.0-SNAPSHOT~ae1f104361
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.477 ms) : 1465, 1488
.   : milestone, 1477,
appsec (2.419 ms) : 2369, 2468
.   : milestone, 2419,
iast (2.19 ms) : 2128, 2252
.   : milestone, 2190,
iast_GLOBAL (2.241 ms) : 2180, 2303
.   : milestone, 2241,
profiling (2.042 ms) : 1993, 2092
.   : milestone, 2042,
tracing (2.017 ms) : 1969, 2064
.   : milestone, 2017,
section candidate
no_agent (1.48 ms) : 1468, 1492
.   : milestone, 1480,
appsec (2.406 ms) : 2357, 2454
.   : milestone, 2406,
iast (2.204 ms) : 2142, 2265
.   : milestone, 2204,
iast_GLOBAL (2.232 ms) : 2170, 2293
.   : milestone, 2232,
profiling (2.042 ms) : 1992, 2091
.   : milestone, 2042,
tracing (2.029 ms) : 1981, 2077
.   : milestone, 2029,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.477 ms [1.465 ms, 1.488 ms]	-
appsec	2.419 ms [2.369 ms, 2.468 ms]	942.17 µs (63.8%)
iast	2.19 ms [2.128 ms, 2.252 ms]	713.46 µs (48.3%)
iast_GLOBAL	2.241 ms [2.18 ms, 2.303 ms]	764.924 µs (51.8%)
profiling	2.042 ms [1.993 ms, 2.092 ms]	565.91 µs (38.3%)
tracing	2.017 ms [1.969 ms, 2.064 ms]	539.983 µs (36.6%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.48 ms [1.468 ms, 1.492 ms]	-
appsec	2.406 ms [2.357 ms, 2.454 ms]	925.487 µs (62.5%)
iast	2.204 ms [2.142 ms, 2.265 ms]	723.688 µs (48.9%)
iast_GLOBAL	2.232 ms [2.17 ms, 2.293 ms]	751.635 µs (50.8%)
profiling	2.042 ms [1.992 ms, 2.091 ms]	561.709 µs (38.0%)
tracing	2.029 ms [1.981 ms, 2.077 ms]	549.192 µs (37.1%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.51.0-SNAPSHOT~6f1ed2c6da, baseline=1.51.0-SNAPSHOT~ae1f104361
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.364 s) : 15364000, 15364000
.   : milestone, 15364000,
appsec (14.842 s) : 14842000, 14842000
.   : milestone, 14842000,
iast (18.434 s) : 18434000, 18434000
.   : milestone, 18434000,
iast_GLOBAL (17.825 s) : 17825000, 17825000
.   : milestone, 17825000,
profiling (15.273 s) : 15273000, 15273000
.   : milestone, 15273000,
tracing (14.901 s) : 14901000, 14901000
.   : milestone, 14901000,
section candidate
no_agent (15.322 s) : 15322000, 15322000
.   : milestone, 15322000,
appsec (14.964 s) : 14964000, 14964000
.   : milestone, 14964000,
iast (18.417 s) : 18417000, 18417000
.   : milestone, 18417000,
iast_GLOBAL (17.9 s) : 17900000, 17900000
.   : milestone, 17900000,
profiling (15.189 s) : 15189000, 15189000
.   : milestone, 15189000,
tracing (14.829 s) : 14829000, 14829000
.   : milestone, 14829000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.364 s [15.364 s, 15.364 s]	-
appsec	14.842 s [14.842 s, 14.842 s]	-522.0 ms (-3.4%)
iast	18.434 s [18.434 s, 18.434 s]	3.07 s (20.0%)
iast_GLOBAL	17.825 s [17.825 s, 17.825 s]	2.461 s (16.0%)
profiling	15.273 s [15.273 s, 15.273 s]	-91.0 ms (-0.6%)
tracing	14.901 s [14.901 s, 14.901 s]	-463.0 ms (-3.0%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.322 s [15.322 s, 15.322 s]	-
appsec	14.964 s [14.964 s, 14.964 s]	-358.0 ms (-2.3%)
iast	18.417 s [18.417 s, 18.417 s]	3.095 s (20.2%)
iast_GLOBAL	17.9 s [17.9 s, 17.9 s]	2.578 s (16.8%)
profiling	15.189 s [15.189 s, 15.189 s]	-133.0 ms (-0.9%)
tracing	14.829 s [14.829 s, 14.829 s]	-493.0 ms (-3.2%)

...nt/agent-ci-visibility/src/main/java/datadog/trace/civisibility/git/tree/ShellGitClient.java

| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [com.google.errorprone:error_prone_annotations](https://errorprone.info) ([source](https://github.com/google/error-prone)) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `2.39.0` -> `2.40.0` | | [org.apache.commons:commons-lang3](https://commons.apache.org/proper/commons-lang/) ([source](https://gitbox.apache.org/repos/asf/commons-lang.git)) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.17.0` -> `3.18.0` | | [org.jetbrains.kotlinx.binary-compatibility-validator](https://github.com/Kotlin/binary-compatibility-validator) | plugin | misk/gradle/libs.versions.toml | gradle | patch | `0.18.0` -> `0.18.1` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.50.1` -> `1.51.0` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.77` -> `2.31.78` | --- ### Release Notes <details> <summary>google/error-prone (com.google.errorprone:error_prone_annotations)</summary> ### [`v2.40.0`](https://github.com/google/error-prone/releases/tag/v2.40.0): Error Prone 2.40.0 Changes: - Bug fixes and improvements - Releases (including snapshots) have migrated from [OSSRH to the Central Publisher Portal](https://central.sonatype.org/pages/ossrh-eol/#process-to-migrate) Full changelog: google/error-prone@v2.39.0...v2.40.0 </details> <details> <summary>Kotlin/binary-compatibility-validator (org.jetbrains.kotlinx.binary-compatibility-validator)</summary> ### [`v0.18.1`](https://github.com/Kotlin/binary-compatibility-validator/releases/tag/0.18.1) [Compare Source](Kotlin/binary-compatibility-validator@0.18.0...0.18.1) #### What's Changed - Fixed a bug preventing use of cross-compilation support during KLIB dump validation \[[#304](https://github.com/Kotlin/binary-compatibility-validator/issues/304)]\[[#306](https://github.com/Kotlin/binary-compatibility-validator/issues/306)] </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.51.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.51.0): 1.51.0 ### Components #### Application Security Management (IAST) - 🐛 Fix verify error when ctor params are used after a call site ([#9083](DataDog/dd-trace-java#9083) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛 Limit the maximum size of the location path in IAST vulnerabilities ([#9028](DataDog/dd-trace-java#9028) - [@jandro996](https://github.com/jandro996)) - 🐛 Fix IAST gRPC handler with null superclass ([#8984](DataDog/dd-trace-java#8984) - [@smola](https://github.com/smola)) - ✨ Optimize IAST Vulnerability Detection ([#8885](DataDog/dd-trace-java#8885) - [@jandro996](https://github.com/jandro996)) #### Application Security Management (WAF) - ✨ Upgrade libddwaf-java to 15.0.0 ([#9022](DataDog/dd-trace-java#9022) - [@sezen-datadog](https://github.com/sezen-datadog)) - ✨ Extract RestEasy json body response schemas ([#9015](DataDog/dd-trace-java#9015) - [@jandro996](https://github.com/jandro996)) - ✨ Extract Jersey json body response schemas ([#9014](DataDog/dd-trace-java#9014) - [@jandro996](https://github.com/jandro996)) - ✨ Extract Ratpack json body response schemas ([#9013](DataDog/dd-trace-java#9013) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Enable API Security by default and make it lazy loading ([#9009](DataDog/dd-trace-java#9009) - [@smola](https://github.com/smola)) - ✨ Extract Vert.x json body response schemas ([#9001](DataDog/dd-trace-java#9001) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Extract Play json body response schemas ([#8995](DataDog/dd-trace-java#8995) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛 Fix Jackson nodes introspection for request/response schema extraction ([#8980](DataDog/dd-trace-java#8980) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Extract Spring json body response schemas ([#8938](DataDog/dd-trace-java#8938) - [@sezen-datadog](https://github.com/sezen-datadog)) - ✨ Default obfuscation regexp update ([#8937](DataDog/dd-trace-java#8937) - [@sezen-datadog](https://github.com/sezen-datadog)) #### Build & Tooling - ✨ Cancel GitLab running pipeline on new PR push ([#9023](DataDog/dd-trace-java#9023) - [@PerfectSlayer](https://github.com/PerfectSlayer)) - ✨ Migrate publishing to Maven Central Portal ([#8807](DataDog/dd-trace-java#8807) - [@sarahchen6](https://github.com/sarahchen6)) #### Continuous Integration Visibility - 🐛 Fix Test Optimization to work with JDK 24 ([#9114](DataDog/dd-trace-java#9114) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add repo root as safe directory on git client creation ([#9033](DataDog/dd-trace-java#9033) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Add PR number tag and improve PR information building ([#8990](DataDog/dd-trace-java#8990) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Update impacted tests logic ([#8923](DataDog/dd-trace-java#8923) - [@daniel-mohedano](https://github.com/daniel-mohedano)) #### Data Streams Monitoring - 🧹 Clean up DSM context injection ([#8776](DataDog/dd-trace-java#8776) - [@PerfectSlayer](https://github.com/PerfectSlayer)) #### Database Monitoring - 🐛 Set trace\_injected in try block ([#9025](DataDog/dd-trace-java#9025) - [@natashadada](https://github.com/natashadada)) #### Dynamic Instrumentation - 🐛 Add source file tracking enable option ([#9115](DataDog/dd-trace-java#9115) - [@jpbempel](https://github.com/jpbempel)) - ✨ Add java.util.Date support ([#9111](DataDog/dd-trace-java#9111) - [@jpbempel](https://github.com/jpbempel)) - ✨ Update file probe format ([#9047](DataDog/dd-trace-java#9047) - [@jpbempel](https://github.com/jpbempel)) - ✨ add safe local var hoisting ([#9034](DataDog/dd-trace-java#9034) - [@jpbempel](https://github.com/jpbempel)) - 🧹 Add new config for debugger upload interval ([#8959](DataDog/dd-trace-java#8959) - [@jpbempel](https://github.com/jpbempel)) - ✨ Enable Code Origin with Dynamic instrumentation ([#8940](DataDog/dd-trace-java#8940) - [@jpbempel](https://github.com/jpbempel)) #### ML Observability (LLMObs) - 💡 LLM Observability SDK ([#8781](DataDog/dd-trace-java#8781) - [@gary-huang](https://github.com/gary-huang), [@nayeem-kamal](https://github.com/nayeem-kamal)) #### Metrics - 🐛 Ensure client stat reporter is started when the agent is not available at bootstrap ([#9082](DataDog/dd-trace-java#9082) - [@amarziali](https://github.com/amarziali)) - ✨ Create metric: appsec.waf.config\_errors ([#8394](DataDog/dd-trace-java#8394) - [@sezen-datadog](https://github.com/sezen-datadog)) #### Platform components - ✨ Introduce environment component ([#9071](DataDog/dd-trace-java#9071) - [@PerfectSlayer](https://github.com/PerfectSlayer)) #### Profiling - 🐛 Remove annoying warning for smap event parsing ([#9119](DataDog/dd-trace-java#9119) - [@jbachorik](https://github.com/jbachorik)) - 🐛 Fix ByteCountingInputStream when reading past EOF ([#8988](DataDog/dd-trace-java#8988) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Realtime User Monitoring - ✨ Add RUM SDK injection for servlet based web servers ([#9110](DataDog/dd-trace-java#9110) - [@PerfectSlayer](https://github.com/PerfectSlayer) [@amarziali](https://github.com/amarziali)) #### Telemetry - ✨ Update the config origin metric to match what it's mapping ([#9045](DataDog/dd-trace-java#9045) - [@sezen-datadog](https://github.com/sezen-datadog)) #### Testing - ✨ Add testing for latest stable version (JDK 24) ([#8875](DataDog/dd-trace-java#8875) - [@sarahchen6](https://github.com/sarahchen6)) #### Trace context propagation - 🐛 Fix bug with dropping baggage when `TracePropagationBehaviorExtract=IGNORE` ([#9037](DataDog/dd-trace-java#9037) - [@mhlidd](https://github.com/mhlidd)) - 🐛 Fix ArrayIndexOutOfBoundsException in PercentEscaper ([#9032](DataDog/dd-trace-java#9032) - [@mhlidd](https://github.com/mhlidd)) #### Tracer core - 🐛 Fix `Error` handling for trace interceptors ([#9097](DataDog/dd-trace-java#9097) - [@AlexeyKuznetsov-DD](https://github.com/AlexeyKuznetsov-DD)) - 💡 Add wildcard feature for `DD_TRACE_HEADER_TAGS` and enabling for Http Response headers ([#9067](DataDog/dd-trace-java#9067) - [@mhlidd](https://github.com/mhlidd)) #### Tracer public API - 💡 Add LLM Observability SDK ([#8781](DataDog/dd-trace-java#8781) - [@gary-huang](https://github.com/gary-huang)) ### Instrumentations #### Akka instrumentation - 🐛 Fix NPE in akka-http and pekko-http integrations ([#9019](DataDog/dd-trace-java#9019) - [@mcculls](https://github.com/mcculls)) #### Eclipse Vert.x instrumentation - ✨ Extract Vert.x json body response schemas ([#9001](DataDog/dd-trace-java#9001) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Write http.route tag as soon as possible in vert.x ([#8952](DataDog/dd-trace-java#8952) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### JAX-WS instrumentation - 💡⚠️ Enable jax-ws integration by default ([#9030](DataDog/dd-trace-java#9030) - [@bm1549](https://github.com/bm1549)) - ✨ Extract Jersey json body response schemas ([#9014](DataDog/dd-trace-java#9014) - [@jandro996](https://github.com/jandro996)) #### Mule instrumentation - 🐛 Propagate grizzly http span in filters if nothing is active ([#9016](DataDog/dd-trace-java#9016) - [@amarziali](https://github.com/amarziali)) #### Play Framework instrumentation - ✨ Extract Play json body response schemas ([#8995](DataDog/dd-trace-java#8995) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Ratpack instrumentation - ✨ Extract Ratpack json body response schemas ([#9013](DataDog/dd-trace-java#9013) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Spring instrumentation - ✨ Extract Spring json body response schemas ([#8938](DataDog/dd-trace-java#8938) - [@sezen-datadog](https://github.com/sezen-datadog)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 649b690d4c9d7dcb572c457f0802b42b8e3e682e

add repo root as safe directory on git client creation

57b2212

daniel-mohedano added type: enhancement Enhancements and improvements comp: ci visibility Continuous Integration Visibility labels Jun 25, 2025

daniel-mohedano marked this pull request as ready for review June 25, 2025 12:18

daniel-mohedano requested a review from a team as a code owner June 25, 2025 12:18

daniel-mohedano requested a review from Mariovido June 25, 2025 12:18

bric3 reviewed Jun 25, 2025

View reviewed changes

...nt/agent-ci-visibility/src/main/java/datadog/trace/civisibility/git/tree/ShellGitClient.java Outdated Show resolved Hide resolved

rename method

ddeeecb

tonyredondo approved these changes Jun 25, 2025

View reviewed changes

bric3 approved these changes Jun 25, 2025

View reviewed changes

Merge branch 'master' into daniel.mohedano/git-config-safe-directory

6f1ed2c

daniel-mohedano merged commit 0f9b46c into master Jun 26, 2025
508 checks passed

daniel-mohedano deleted the daniel.mohedano/git-config-safe-directory branch June 26, 2025 09:59

github-actions bot added this to the 1.51.0 milestone Jun 26, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add repo root as safe directory on git client creation #9033

Add repo root as safe directory on git client creation #9033

Uh oh!

daniel-mohedano commented Jun 25, 2025

Uh oh!

pr-commenter bot commented Jun 25, 2025 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Add repo root as safe directory on git client creation #9033

Add repo root as safe directory on git client creation #9033

Uh oh!

Conversation

daniel-mohedano commented Jun 25, 2025

What Does This Do

Motivation

Additional Notes

Contributor Checklist

Uh oh!

pr-commenter bot commented Jun 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

Uh oh!

Uh oh!

Uh oh!

pr-commenter bot commented Jun 25, 2025 •

edited

Loading