diff --git a/Dockerfile b/Dockerfile
index 8d8764a..baedf1d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,8 @@
 FROM python:3.12-slim
 WORKDIR /app
 RUN apt-get update -qq && apt-get install -y -qq openssh-client git && rm -rf /var/lib/apt/lists/*
+# git operations run as root over bind-mounted /repos (may be owned by host uid) -> trust it.
+RUN git config --system --add safe.directory '*'
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 COPY src/ ./src/