diff --git a/images/windows/scripts/build/Install-Git.ps1 b/images/windows/scripts/build/Install-Git.ps1 index 21648cef..4c8cbb8c 100644 --- a/images/windows/scripts/build/Install-Git.ps1 +++ b/images/windows/scripts/build/Install-Git.ps1 @@ -41,6 +41,8 @@ if ($LASTEXITCODE -ne 0) { # Disable GCM machine-wide [Environment]::SetEnvironmentVariable("GCM_INTERACTIVE", "Never", "Machine") +# Revert to the old behaviour and avoid the Git LFS problems (https://github.blog/2024-05-14-securing-git-addressing-5-new-vulnerabilities/) +[Environment]::SetEnvironmentVariable("GIT_CLONE_PROTECTION_ACTIVE", "false", "Machine") # Add to PATH Add-MachinePathItem "C:\Program Files\Git\bin" diff --git a/images/windows/scripts/tests/Git.Tests.ps1 b/images/windows/scripts/tests/Git.Tests.ps1 index 00b3d230..87ef9b55 100644 --- a/images/windows/scripts/tests/Git.Tests.ps1 +++ b/images/windows/scripts/tests/Git.Tests.ps1 @@ -22,4 +22,8 @@ Describe "Git" { It "GCM_INTERACTIVE environment variable should be equal Never" { $env:GCM_INTERACTIVE | Should -BeExactly Never } + + It "GIT_CLONE_PROTECTION_ACTIVE environment variable should be equal false" { + $env:GIT_CLONE_PROTECTION_ACTIVE | Should -BeExactly false + } }