From 1c3d0a5320859c25f4ac3116d4ef9f5174f35768 Mon Sep 17 00:00:00 2001
From: Sebastian Palencsar <hello@linuxcommand.dev>
Date: Mon, 23 Feb 2026 13:10:48 +0100
Subject: [PATCH] Run makepkg as non-root in AUR publish workflow

---
 .github/workflows/aur-publish.yml | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/aur-publish.yml b/.github/workflows/aur-publish.yml
index 6cf4933..fecd8b3 100755
--- a/.github/workflows/aur-publish.yml
+++ b/.github/workflows/aur-publish.yml
@@ -19,6 +19,7 @@ jobs:
         run: |
           pacman -Syu --noconfirm
           pacman -S --noconfirm --needed base-devel git openssh curl
+          useradd -m -u 1000 builder || true
 
       - name: Checkout
         uses: actions/checkout@v4
@@ -28,8 +29,12 @@ jobs:
 
       - name: Generate .SRCINFO
         run: |
-          cd packaging
-          makepkg --printsrcinfo > .SRCINFO
+          rm -rf /home/builder/work
+          mkdir -p /home/builder/work
+          cp -R . /home/builder/work
+          chown -R builder:builder /home/builder/work
+          su - builder -c "cd /home/builder/work/packaging && makepkg --printsrcinfo > .SRCINFO"
+          cp /home/builder/work/packaging/.SRCINFO packaging/.SRCINFO
 
       - name: Configure SSH for AUR
         env:
@@ -71,4 +76,3 @@ jobs:
           git add PKGBUILD .SRCINFO
           git commit -m "Update deskify-bin to ${GITHUB_REF_NAME}"
           git push
-