Summary

The first main-branch CI run of build-runner failed with exit 128 at git log. Git refused to operate on the workspace because the bind-mount host user (pi) doesn’t match the container user (root).

Fix

Add `git config –global –add safe.directory /workspace` at the top of `ci/build-runner.sh` — matches the pattern the anvil server’s own .anvil.yml uses.

Context

• No orphaned releases — git log runs before `release create`, so nothing was created before the failure
• The rest of the publish path (release create, asset upload, trap rollback) is still untested end-to-end