diff --git a/.github/workflows/build_release.yml b/.github/workflows/build_release.yml
index 446ff79..e4f0682 100644
--- a/.github/workflows/build_release.yml
+++ b/.github/workflows/build_release.yml
@@ -15,7 +15,7 @@ jobs:
       run: dnf install -y git tito
 
     # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
       with:
         fetch-depth: 0
 
@@ -24,6 +24,8 @@ jobs:
 
     - name: Build rpm
       run: |
+        # Fix for: https://github.com/actions/checkout/issues/766 (git CVE-2022-24765)
+        git config --global --add safe.directory "$GITHUB_WORKSPACE"
         cd $GITHUB_WORKSPACE
         tito build --offline --rpm -o .
 
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ccd777e..886bc30 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -19,13 +19,15 @@ jobs:
       run: dnf install -y git tito
 
     # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
     - name: Install build dependencies
       run: dnf builddep -y $GITHUB_WORKSPACE/freeipa-mailserver.spec
 
     - name: Build rpm
       run: |
+        # Fix for: https://github.com/actions/checkout/issues/766 (git CVE-2022-24765)
+        git config --global --add safe.directory "$GITHUB_WORKSPACE"
         cd $GITHUB_WORKSPACE
         tito build --test --rpm -o .