Assure the 'file' protocol is always allowed

workaround for https://bugs.launchpad.net/ubuntu/+source/git/+bug/1993586
where git refuses to run submodule updates as they can be used as attack
vector.

Author: Byron

.github/workflows/ci.yml

@@ -38,7 +38,6 @@ jobs:
     - name: Setup dependencies
       run:
         sudo apt-get install tree
-    - run: git config --global protocol.file.allow always # workaround for https://bugs.launchpad.net/ubuntu/+source/git/+bug/1993586
     - name: test
       env:
         CI: true

tests/tools/src/lib.rs

@@ -327,11 +327,13 @@ fn scripted_fixture_repo_read_only_with_args_inner(
                     .env("GIT_COMMITTER_DATE", "2000-01-02 00:00:00 +0000")
                     .env("GIT_COMMITTER_EMAIL", "[email protected]")
                     .env("GIT_COMMITTER_NAME", "committer")
-                    .env("GIT_CONFIG_COUNT", "2")
+                    .env("GIT_CONFIG_COUNT", "3")
                     .env("GIT_CONFIG_KEY_0", "commit.gpgsign")
                     .env("GIT_CONFIG_VALUE_0", "false")
                     .env("GIT_CONFIG_KEY_1", "init.defaultBranch")
                     .env("GIT_CONFIG_VALUE_1", "main")
+                    .env("GIT_CONFIG_KEY_2", "protocol.file.allow")
+                    .env("GIT_CONFIG_VALUE_2", "always")
                     .output()?;
                 if !output.status.success() {
                     write_failure_marker(&failure_marker);