diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index a25ab67b..f8c489da 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -50,6 +50,7 @@ jobs:
       - name: script
         id: required
         run: |
+          git config --global --add safe.directory '*'
           cargo clippy --all-targets --all-features --locked --workspace --quiet
 
   check-try-runtime:
@@ -77,6 +78,7 @@ jobs:
       - name: script
         id: required
         run: |
+          git config --global --add safe.directory '*'
           cargo check --locked --all --features try-runtime --quiet
           # Check that teyrchain-template will compile with `try-runtime` feature flag.
           cargo check --locked -p teyrchain-template-node --features try-runtime
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 4520fb70..22fe8f0a 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -38,8 +38,11 @@ jobs:
       # Exclude pezkuwi-zombienet-sdk-tests: its build.rs runs nested cargo build
       # which doesn't inherit workspace [patch.crates-io] settings, causing
       # serde_core duplicate lang item error. See: https://github.com/pezkuwichain/pezkuwi-sdk/issues/357
-      - run: cargo test --doc --workspace --locked --all-features --exclude pezkuwi-zombienet-sdk-tests
+      - name: script
         id: required
+        run: |
+          git config --global --add safe.directory '*'
+          cargo test --doc --workspace --locked --all-features --exclude pezkuwi-zombienet-sdk-tests
 
   build-rustdoc:
     runs-on: ${{ needs.preflight.outputs.RUNNER }}
@@ -60,8 +63,11 @@ jobs:
 
       # Exclude pezkuwi-zombienet-sdk-tests: nested cargo build in build.rs
       # doesn't inherit workspace patches. See test-doc job comment.
-      - run: cargo doc --all-features --workspace --no-deps --locked --exclude pezkuwi-zombienet-sdk-tests
+      - name: script
         id: required
+        run: |
+          git config --global --add safe.directory '*'
+          cargo doc --all-features --workspace --no-deps --locked --exclude pezkuwi-zombienet-sdk-tests
       - run: rm -f ./target/doc/.lock
       - run: mv ./target/doc ./crate-docs
       - name: Inject Simple Analytics script
diff --git a/.github/workflows/tests-linux-stable.yml b/.github/workflows/tests-linux-stable.yml
index 0cfe6cf5..eaafe583 100644
--- a/.github/workflows/tests-linux-stable.yml
+++ b/.github/workflows/tests-linux-stable.yml
@@ -46,7 +46,9 @@ jobs:
         run: rustup target add wasm32v1-none || true
       - name: script
         id: required
-        run: WASM_BUILD_NO_COLOR=1 cargo test -p pezstaging-node-cli --release --locked -- --ignored
+        run: |
+          git config --global --add safe.directory '*'
+          WASM_BUILD_NO_COLOR=1 cargo test -p pezstaging-node-cli --release --locked -- --ignored
 
   # https://github.com/pezkuwichain/ci_cd/issues/864
   test-linux-stable-runtime-benchmarks:
@@ -72,7 +74,9 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: script
         id: required
-        run: cargo nextest run --workspace --features runtime-benchmarks benchmark --locked --cargo-profile testnet --cargo-quiet
+        run: |
+          git config --global --add safe.directory '*'
+          cargo nextest run --workspace --features runtime-benchmarks benchmark --locked --cargo-profile testnet --cargo-quiet
 
   test-linux-stable:
     needs: [preflight]
@@ -154,6 +158,7 @@ jobs:
       - name: script
         id: required
         run: |
+          git config --global --add safe.directory '*'
           cargo nextest run --workspace \
                    --locked \
                    --release \