diff --git a/.github/workflows/coq-debian.yml b/.github/workflows/coq-debian.yml
index 037f0430e3..5b7ec81e32 100644
--- a/.github/workflows/coq-debian.yml
+++ b/.github/workflows/coq-debian.yml
@@ -38,7 +38,9 @@ jobs:
       with:
         submodules: recursive
     - name: work around broken git config
-      run: git config --global --add safe.directory "*"
+      run: |
+        git config --global --add safe.directory "*"
+        sudo git config --global --add safe.directory "*"
     - name: container build params
       run: etc/ci/describe-system-config.sh
     - name: make deps