diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9d3044a8ecacb0a79bcfcd9d622aca1d45e0efc8..f5c46eeb6dc36eafbb57e870dfb3ca2db258c363 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -71,6 +71,8 @@ jobs:
           git config --global core.symlinks true
           git config --global user.email 'renovate@whitesourcesoftware.com'
           git config --global user.name  'Renovate Bot'
+          # https://github.blog/2022-10-18-git-security-vulnerabilities-announced/
+          git config --global protocol.file.allow always
           npm config set scripts-prepend-node-path true
           git --version
           echo "Node $(node --version)"