diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index 922f3021..e42d40eb 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -15,6 +15,8 @@ jobs:
     if: gitea.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
     steps:
+      - name: Fix Git safe directory
+        run: "git config --global --add safe.directory '*' && git remote set-url origin https://epicnabbo.nl || true"
       - name: Install Bash in Alpine
         run: "if [ -f /etc/alpine-release ]; then apk add --no-cache bash; fi"
       - name: Read recent CMS runtime errors
@@ -34,6 +36,8 @@ jobs:
     if: startsWith(gitea.ref_name, 'v') == false
     runs-on: ubuntu-latest
     steps:
+      - name: Fix Git safe directory
+        run: "git config --global --add safe.directory '*' && git remote set-url origin https://epicnabbo.nl || true"
       - name: Install Bash in Alpine
         run: "if [ -f /etc/alpine-release ]; then apk add --no-cache bash; fi"
       - name: Typecheck, lint, and test
@@ -78,6 +82,8 @@ jobs:
     if: gitea.event_name == 'push' && gitea.ref_name == 'main'
     runs-on: ubuntu-latest
     steps:
+      - name: Fix Git safe directory
+        run: "git config --global --add safe.directory '*' && git remote set-url origin https://epicnabbo.nl || true"
       - name: Install Bash in Alpine
         run: "if [ -f /etc/alpine-release ]; then apk add --no-cache bash; fi"
       - name: Deploy
@@ -302,6 +308,8 @@ jobs:
     if: startsWith(gitea.ref_name, 'v')
     runs-on: ubuntu-latest
     steps:
+      - name: Fix Git safe directory
+        run: "git config --global --add safe.directory '*' && git remote set-url origin https://epicnabbo.nl || true"
       - name: Install Bash in Alpine
         run: "if [ -f /etc/alpine-release ]; then apk add --no-cache bash; fi"
       - name: Build and deploy
diff --git a/.gitea/workflows/renovate.yaml b/.gitea/workflows/renovate.yaml
index a0e663e3..875e93e1 100644
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -8,6 +8,8 @@ jobs:
   renovate:
     runs-on: ubuntu-latest
     steps:
+      - name: Fix Git safe directory
+        run: "git config --global --add safe.directory '*' && git remote set-url origin https://epicnabbo.nl || true"
       - name: Install Bash in Alpine
         run: "if [ -f /etc/alpine-release ]; then apk add --no-cache bash; fi"
       - name: Self-hosted Renovate