Show file ownership and safe.directory entries on every test job

In each workflow that runs the test suite, add a step to the `test` job
that prints the ownership (NTFS Owner / POSIX uid+gid) of key paths: the
workspace, its `.git`, gitdb and smmap submodule worktrees and gitfiles,
and the runner `HOME` and `~/.gitconfig`. Also print the full list of
`safe.directory` entries at that point.

GitPython's tests are intentionally coupled to the layout and state of
the GitPython repository they run against. The ownership and trust
config that gate whether git will operate on a path are part of that
state. Surfacing them in every test job gives diagnostics to read
alongside any failure that turns out to be a CI setup problem.

The step is added to:

- `cygwin-test.yml`'s `test` job, with a YAML anchor
  (`&ownership-display`) so the temporary `reproduce-safe-dir` matrix
  job can reuse it via `*ownership-display`.

- `pythonpackage.yml`'s `test` job (Linux / macOS / native Windows).

- `alpine-test.yml`'s `test` job.

It runs after `init-tests-after-clone.sh` has populated the submodules
and after `safe.directory` has been configured (in workflows that
configure it), so the values reported are what the tests will see.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: EliahKagan

.github/workflows/alpine-test.yml

@@ -61,6 +61,26 @@ jobs:
         . .venv/bin/activate
         pip install '.[test]'
 
+    - name: Show file ownership and safe.directory entries
+      run: |
+        echo "==================== File ownership ===================="
+        for p in \
+            "$(pwd)" \
+            "$(pwd)/.git" \
+            "$(pwd)/git/ext/gitdb" \
+            "$(pwd)/git/ext/gitdb/.git" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap/.git" \
+            "${HOME:-}" \
+            "${HOME:-}/.gitconfig"; do
+          if [ -n "$p" ]; then
+            ls -ld -- "$p" 2>/dev/null || echo "(missing: $p)"
+          fi
+        done
+        echo
+        echo "==================== safe.directory entries ===================="
+        git config --global --get-all safe.directory 2>&1 || echo "(none)"
+
     - name: Show version and platform information
       run: |
         . .venv/bin/activate

.github/workflows/cygwin-test.yml

@@ -90,6 +90,65 @@ jobs:
       run: |
         pip install '.[test]'
 
+    - &ownership-display
+      name: Show file ownership and safe.directory entries
+      run: |
+        echo "==================== File ownership (Cygwin view, ls -ld) ===================="
+        for p in \
+            "$(pwd)" \
+            "$(pwd)/.git" \
+            "$(pwd)/git/ext/gitdb" \
+            "$(pwd)/git/ext/gitdb/.git" \
+            "$(pwd)/.git/modules/gitdb" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap/.git" \
+            "$(pwd)/.git/modules/gitdb/modules/smmap" \
+            "${HOME:-}" \
+            "${HOME:-}/.gitconfig"; do
+          if [ -n "$p" ]; then
+            ls -ld -- "$p" 2>/dev/null || echo "(missing: $p)"
+          fi
+        done
+        echo
+        echo "==================== File ownership (Win32 view, Get-Acl) ===================="
+        # Cygwin's ls -ld and stat go through Cygwin's SID-to-uid mapping
+        # (well-known SIDs by their RID, machine-local accounts by 0x30000+RID).
+        # The mapping is deterministic, but going via Win32 Get-Acl gives the
+        # NTAccount form of the NTFS Owner SID directly, with no Cygwin layer
+        # in between -- useful for confirming that what Cygwin reports as
+        # "Administrators" really is the BUILTIN\Administrators SID (S-1-5-32-544)
+        # rather than some local-machine account that Cygwin happens to map to
+        # the same uid. The workflow sets CYGWIN_NOWINPATH=1, so Windows paths
+        # are not on Cygwin's $PATH; invoke powershell.exe by absolute path.
+        ps_exe=/cygdrive/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe
+        if [ -x "$ps_exe" ]; then
+          for p in \
+              "$(pwd)" \
+              "$(pwd)/.git" \
+              "$(pwd)/git/ext/gitdb" \
+              "$(pwd)/git/ext/gitdb/.git" \
+              "$(pwd)/.git/modules/gitdb" \
+              "$(pwd)/git/ext/gitdb/gitdb/ext/smmap" \
+              "$(pwd)/git/ext/gitdb/gitdb/ext/smmap/.git" \
+              "$(pwd)/.git/modules/gitdb/modules/smmap" \
+              "${HOME:-}/.gitconfig"; do
+            if [ -n "$p" ] && [ -e "$p" ]; then
+              wp=$(cygpath -w "$p")
+              # Escape single-quotes for PowerShell single-quoted string literal: ' -> ''
+              wp_escaped=${wp//\'/\'\'}
+              owner=$("$ps_exe" -NoProfile -NonInteractive -Command \
+                "try { (Get-Acl -LiteralPath '${wp_escaped}').Owner } catch { 'ERROR: ' + \$_.Exception.Message }" \
+                2>/dev/null | tr -d '\r')
+              printf "  %-44s  %s\n" "$owner" "$wp"
+            fi
+          done
+        else
+          echo "($ps_exe not found -- skipping Win32 view)"
+        fi
+        echo
+        echo "==================== safe.directory entries ===================="
+        git config --global --get-all safe.directory 2>&1 || echo "(none)"
+
     - name: Show version and platform information
       run: |
         uname -a
@@ -192,6 +251,7 @@ jobs:
     - *setup-venv
     - *update-pypa
     - *install-deps
+    - *ownership-display
 
     - name: Run submodule tests
       run: |

.github/workflows/pythonpackage.yml

@@ -87,6 +87,26 @@ jobs:
       run: |
         pip install '.[test]'
 
+    - name: Show file ownership and safe.directory entries
+      run: |
+        echo "==================== File ownership ===================="
+        for p in \
+            "$(pwd)" \
+            "$(pwd)/.git" \
+            "$(pwd)/git/ext/gitdb" \
+            "$(pwd)/git/ext/gitdb/.git" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap" \
+            "$(pwd)/git/ext/gitdb/gitdb/ext/smmap/.git" \
+            "${HOME:-}" \
+            "${HOME:-}/.gitconfig"; do
+          if [ -n "$p" ]; then
+            ls -ld -- "$p" 2>/dev/null || echo "(missing: $p)"
+          fi
+        done
+        echo
+        echo "==================== safe.directory entries ===================="
+        git config --global --get-all safe.directory 2>&1 || echo "(none)"
+
     - name: Show version and platform information
       run: |
         uname -a