Show file ownership and safe.directory entries on every test job

Add a step to each workflow that runs the test suite that prints the
ownership (NTFS Owner / POSIX uid+gid) of key paths -- the workspace,
its `.git`, the gitdb and smmap submodule worktrees and gitfiles, the
runner's home directory, and `~/.gitconfig` -- as well as the full list
of `safe.directory` entries at that point.

GitPython's tests are intentionally coupled to the layout and state of
the GitPython repository they run against; ownership and the trust-
config that gates whether git will operate on a path are part of that
state. Surfacing them in every test job gives diagnostics to read
alongside any failure that turns out to be a setup problem rather than a
code defect.

The step is added to:

- `cygwin-test.yml`'s `test` job, with a YAML anchor
  (`&ownership-display`) so the temporary `reproduce-safe-dir` matrix
  job can reuse it via `*ownership-display`.
- `pythonpackage.yml`'s `test` job (Linux/macOS/Windows-native).
- `alpine-test.yml`'s `test` job.

It runs after `init-tests-after-clone.sh` has populated the submodules
and after `safe.directory` has been configured (in workflows that
configure it), so the values reported are what the tests will see.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: EliahKagan

.github/workflows/alpine-test.yml

@@ -61,6 +61,26 @@ jobs:
         . .venv/bin/activate
         pip install '.[test]'
 
+    - name: Show file ownership and safe.directory entries
+      run: |
+        echo "==================== File ownership ===================="
+        for p in \
+            "$(pwd)" \
+            "$(pwd)/.git" \
+            "$(pwd)/git/ext/gitdb" \
+            "$(pwd)/git/ext/gitdb/.git" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap/.git" \
+            "${HOME:-}" \
+            "${HOME:-}/.gitconfig"; do
+          if [ -n "$p" ]; then
+            ls -ld -- "$p" 2>/dev/null || echo "(missing: $p)"
+          fi
+        done
+        echo
+        echo "==================== safe.directory entries ===================="
+        git config --global --get-all safe.directory 2>&1 || echo "(none)"
+
     - name: Show version and platform information
       run: |
         . .venv/bin/activate

.github/workflows/cygwin-test.yml

@@ -90,6 +90,65 @@ jobs:
       run: |
         pip install '.[test]'
 
+    - &ownership-display
+      name: Show file ownership and safe.directory entries
+      run: |
+        echo "==================== File ownership (Cygwin view, ls -ld) ===================="
+        for p in \
+            "$(pwd)" \
+            "$(pwd)/.git" \
+            "$(pwd)/git/ext/gitdb" \
+            "$(pwd)/git/ext/gitdb/.git" \
+            "$(pwd)/.git/modules/gitdb" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap/.git" \
+            "$(pwd)/.git/modules/gitdb/modules/smmap" \
+            "${HOME:-}" \
+            "${HOME:-}/.gitconfig"; do
+          if [ -n "$p" ]; then
+            ls -ld -- "$p" 2>/dev/null || echo "(missing: $p)"
+          fi
+        done
+        echo
+        echo "==================== File ownership (Win32 view, Get-Acl) ===================="
+        # Cygwin's ls -ld and stat go through Cygwin's SID-to-uid mapping
+        # (well-known SIDs by their RID, machine-local accounts by 0x30000+RID).
+        # The mapping is deterministic, but going via Win32 Get-Acl gives the
+        # NTAccount form of the NTFS Owner SID directly, with no Cygwin layer
+        # in between -- useful for confirming that what Cygwin reports as
+        # "Administrators" really is the BUILTIN\Administrators SID (S-1-5-32-544)
+        # rather than some local-machine account that Cygwin happens to map to
+        # the same uid. The workflow sets CYGWIN_NOWINPATH=1, so Windows paths
+        # are not on Cygwin's $PATH; invoke powershell.exe by absolute path.
+        ps_exe=/cygdrive/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe
+        if [ -x "$ps_exe" ]; then
+          for p in \
+              "$(pwd)" \
+              "$(pwd)/.git" \
+              "$(pwd)/git/ext/gitdb" \
+              "$(pwd)/git/ext/gitdb/.git" \
+              "$(pwd)/.git/modules/gitdb" \
+              "$(pwd)/git/ext/gitdb/gitdb/ext/smmap" \
+              "$(pwd)/git/ext/gitdb/gitdb/ext/smmap/.git" \
+              "$(pwd)/.git/modules/gitdb/modules/smmap" \
+              "${HOME:-}/.gitconfig"; do
+            if [ -n "$p" ] && [ -e "$p" ]; then
+              wp=$(cygpath -w "$p")
+              # Escape single-quotes for PowerShell single-quoted string literal: ' -> ''
+              wp_escaped=${wp//\'/\'\'}
+              owner=$("$ps_exe" -NoProfile -NonInteractive -Command \
+                "try { (Get-Acl -LiteralPath '${wp_escaped}').Owner } catch { 'ERROR: ' + \$_.Exception.Message }" \
+                2>/dev/null | tr -d '\r')
+              printf "  %-44s  %s\n" "$owner" "$wp"
+            fi
+          done
+        else
+          echo "($ps_exe not found -- skipping Win32 view)"
+        fi
+        echo
+        echo "==================== safe.directory entries ===================="
+        git config --global --get-all safe.directory 2>&1 || echo "(none)"
+
     - name: Show version and platform information
       run: |
         uname -a
@@ -192,6 +251,7 @@ jobs:
     - *setup-venv
     - *update-pypa
     - *install-deps
+    - *ownership-display
 
     - name: Run submodule tests
       run: |

.github/workflows/pythonpackage.yml

@@ -87,6 +87,26 @@ jobs:
       run: |
         pip install '.[test]'
 
+    - name: Show file ownership and safe.directory entries
+      run: |
+        echo "==================== File ownership ===================="
+        for p in \
+            "$(pwd)" \
+            "$(pwd)/.git" \
+            "$(pwd)/git/ext/gitdb" \
+            "$(pwd)/git/ext/gitdb/.git" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap/.git" \
+            "${HOME:-}" \
+            "${HOME:-}/.gitconfig"; do
+          if [ -n "$p" ]; then
+            ls -ld -- "$p" 2>/dev/null || echo "(missing: $p)"
+          fi
+        done
+        echo
+        echo "==================== safe.directory entries ===================="
+        git config --global --get-all safe.directory 2>&1 || echo "(none)"
+
     - name: Show version and platform information
       run: |
         uname -a