diff --git a/.github/workflows/release-kiosk.yml b/.github/workflows/release-kiosk.yml
index 5aa0379..b5137c8 100644
--- a/.github/workflows/release-kiosk.yml
+++ b/.github/workflows/release-kiosk.yml
@@ -55,6 +55,9 @@ jobs:
           apt-get install -y --no-install-recommends \
             ca-certificates curl git build-essential pkg-config \
             jq sudo
+          # Container UID != workspace owner UID — git's CVE-2022-24765
+          # check refuses to operate. Whitelist before checkout runs git.
+          git config --global --add safe.directory '*'
 
       - uses: actions/checkout@v4