diff --git a/.github/workflows/pullrequest.yml b/.github/workflows/pullrequest.yml
index 8fd2e8e..7cd5abc 100644
--- a/.github/workflows/pullrequest.yml
+++ b/.github/workflows/pullrequest.yml
@@ -82,6 +82,10 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
           submodules: recursive
+      - name: Work around github/git ownership weirdness
+        id: ignore-directory-ownership
+        run: |
+          git config --global --add safe.directory /__w/certwrapper/certwrapper
       - name: Update submodules on ${{ matrix.distro }} for ${{ matrix.efiarch }}
         id: update-submodules
         run: |
@@ -152,6 +156,10 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
           submodules: recursive
+      - name: Work around github/git ownership weirdness
+        id: ignore-directory-ownership
+        run: |
+          git config --global --add safe.directory /__w/certwrapper/certwrapper
       - name: Update submodules on ${{ matrix.distro }} for ${{ matrix.efiarch }}
         id: update-submodules
         run: |