diff --git a/.github/workflows/linux-full-tests.yml b/.github/workflows/linux-full-tests.yml
index 054a0f20b63..162f6288370 100644
--- a/.github/workflows/linux-full-tests.yml
+++ b/.github/workflows/linux-full-tests.yml
@@ -42,13 +42,11 @@ jobs:
             tag: hirsute
             cc: gcc
             cxx: g++
-            gitsetup: true
           - name: "gcc 11.x"
             shortname: gcc11
             tag: impish
             cc: gcc
             cxx: g++
-            gitsetup: true
           - name: "Clang 6 (Boost 1.72)"
             shortname: clang6
             tag: bionic
@@ -84,75 +82,64 @@ jobs:
             tag: hirsute
             cc: clang
             cxx: clang++
-            gitsetup: true
           - name: "Clang 13"
             shortname: clang13
             tag: impish
             cc: clang
             cxx: clang++
-            gitsetup: true
           - name: "Clang 14"
             shortname: clang14
             tag: jammy
             cc: clang
             cxx: clang++
-            gitsetup: true
           - name: "C++11 mode"
             shortname: c++11
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++11"
-            gitsetup: true
           - name: "C++14 mode"
             shortname: c++14
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++14"
-            gitsetup: true
           - name: "C++17 mode"
             shortname: c++17
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++17"
-            gitsetup: true
           - name: "C++20 mode"
             shortname: c++20
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++20"
-            gitsetup: true
           - name: "Unity build enabled"
             shortname: unity
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-unity-build
-            gitsetup: true
           - name: "Intraday calculations enabled"
             shortname: intraday
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-intraday
-            gitsetup: true
           - name: "Indexed coupons enabled"
             shortname: indexed
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-indexed-coupons
-            gitsetup: true
           - name: "C++11 classes enabled"
             shortname: stdclasses
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-std-classes
-            gitsetup: true
           - name: "auto_ptr re-enabled"
             shortname: autoptr
             tag: rolling
@@ -160,41 +147,32 @@ jobs:
             cxx: g++
             cxxflags: "-Wno-deprecated-declarations"
             configureflags: --disable-std-unique-ptr
-            gitsetup: true
           - name: "Thread-safe observer enabled"
             shortname: threadsafe
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-thread-safe-observer-pattern
-            gitsetup: true
           - name: "Thread-safe singleton init enabled"
             shortname: threadsafeinit
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-thread-safe-singleton-init
-            gitsetup: true
           - name: "Sessions enabled"
             shortname: sessions
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-sessions
-            gitsetup: true
           - name: "OpenMP enabled"
             shortname: openmp
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-openmp
-            gitsetup: true
     container: ghcr.io/lballabio/quantlib-devenv:${{ matrix.tag }}
     steps:
-    - name: Set up git permissions
-      if: ${{ matrix.gitsetup }}
-      run: |
-        git config --global --add safe.directory $GITHUB_WORKSPACE
     - uses: actions/checkout@v3
     - name: Cache
       uses: actions/cache@v3
diff --git a/.github/workflows/linux-nondefault.yml b/.github/workflows/linux-nondefault.yml
index da9aa5a7d8a..f51e675a093 100644
--- a/.github/workflows/linux-nondefault.yml
+++ b/.github/workflows/linux-nondefault.yml
@@ -37,13 +37,11 @@ jobs:
             tag: hirsute
             cc: gcc
             cxx: g++
-            gitsetup: true
           - name: "gcc 11.x"
             shortname: gcc11
             tag: impish
             cc: gcc
             cxx: g++
-            gitsetup: true
           - name: "Clang 6 (Boost 1.72)"
             shortname: clang6
             tag: bionic
@@ -79,54 +77,46 @@ jobs:
             tag: hirsute
             cc: clang
             cxx: clang++
-            gitsetup: true
           - name: "Clang 13"
             shortname: clang13
             tag: impish
             cc: clang
             cxx: clang++
-            gitsetup: true
           - name: "Clang 14"
             shortname: clang14
             tag: jammy
             cc: clang
             cxx: clang++
-            gitsetup: true
           - name: "C++11 mode"
             shortname: c++11
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++11"
-            gitsetup: true
           - name: "C++14 mode"
             shortname: c++14
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++14"
-            gitsetup: true
           - name: "C++17 mode"
             shortname: c++17
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++17"
-            gitsetup: true
           - name: "C++20 mode"
             shortname: c++20
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++20"
-            gitsetup: true
           - name: "Unity build enabled"
             shortname: unity
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-unity-build
-            gitsetup: true
           - name: "C++11 classes enabled"
             shortname: stdclasses
             tag: rolling
@@ -134,20 +124,14 @@ jobs:
             cxx: g++
             cxxflags: "-std=c++17"
             configureflags: --enable-std-classes
-            gitsetup: true
           - name: "OpenMP enabled"
             shortname: openmp
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-openmp
-            gitsetup: true
     container: ghcr.io/lballabio/quantlib-devenv:${{ matrix.tag }}
     steps:
-    - name: Set up git permissions
-      if: ${{ matrix.gitsetup }}
-      run: |
-        git config --global --add safe.directory $GITHUB_WORKSPACE
     - uses: actions/checkout@v3
     - name: Cache
       uses: actions/cache@v3
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 46367b239f2..5505dea78bf 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -42,14 +42,12 @@ jobs:
             tag: hirsute
             cc: gcc
             cxx: g++
-            gitsetup: true
           - name: "gcc 11.x"
             shortname: gcc11
             tag: impish
             cc: gcc
             cxx: g++
             tests: true
-            gitsetup: true
           - name: "Clang 6 (Boost 1.72)"
             shortname: clang6
             tag: bionic
@@ -85,55 +83,47 @@ jobs:
             tag: hirsute
             cc: clang
             cxx: clang++
-            gitsetup: true
           - name: "Clang 13"
             shortname: clang13
             tag: impish
             cc: clang
             cxx: clang++
-            gitsetup: true
           - name: "Clang 14"
             shortname: clang14
             tag: jammy
             cc: clang
             cxx: clang++
             tests: true
-            gitsetup: true
           - name: "C++11 mode"
             shortname: c++11
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++11"
-            gitsetup: true
           - name: "C++14 mode"
             shortname: c++14
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++14"
-            gitsetup: true
           - name: "C++17 mode"
             shortname: c++17
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++17"
-            gitsetup: true
           - name: "C++20 mode"
             shortname: c++20
             tag: rolling
             cc: gcc
             cxx: g++
             cxxflags: "-std=c++20"
-            gitsetup: true
           - name: "Unity build enabled"
             shortname: unity
             tag: rolling
             cc: gcc
             cxx: g++
             configureflags: --enable-unity-build
-            gitsetup: true
           - name: "Intraday calculations enabled"
             shortname: intraday
             tag: rolling
@@ -141,7 +131,6 @@ jobs:
             cxx: g++
             configureflags: --enable-intraday
             tests: true
-            gitsetup: true
           - name: "Indexed coupons enabled"
             shortname: indexed
             tag: rolling
@@ -149,7 +138,6 @@ jobs:
             cxx: g++
             configureflags: --enable-indexed-coupons
             tests: true
-            gitsetup: true
           - name: "C++11 classes enabled"
             shortname: stdclasses
             tag: rolling
@@ -157,7 +145,6 @@ jobs:
             cxx: g++
             configureflags: --enable-std-classes
             tests: true
-            gitsetup: true
           - name: "auto_ptr re-enabled"
             shortname: autoptr
             tag: rolling
@@ -166,7 +153,6 @@ jobs:
             cxxflags: "-Wno-deprecated-declarations"
             configureflags: --disable-std-unique-ptr
             tests: true
-            gitsetup: true
           - name: "Thread-safe observer enabled"
             shortname: threadsafe
             tag: rolling
@@ -174,7 +160,6 @@ jobs:
             cxx: g++
             configureflags: --enable-thread-safe-observer-pattern
             tests: true
-            gitsetup: true
           - name: "Thread-safe singleton init enabled"
             shortname: threadsafeinit
             tag: rolling
@@ -182,7 +167,6 @@ jobs:
             cxx: g++
             configureflags: --enable-thread-safe-singleton-init
             tests: true
-            gitsetup: true
           - name: "Sessions enabled"
             shortname: sessions
             tag: rolling
@@ -190,7 +174,6 @@ jobs:
             cxx: g++
             configureflags: --enable-sessions
             tests: true
-            gitsetup: true
           - name: "OpenMP enabled"
             shortname: openmp
             tag: rolling
@@ -198,7 +181,6 @@ jobs:
             cxx: g++
             configureflags: --enable-openmp
             tests: true
-            gitsetup: true
           - name: "Parallel unit-test runner"
             shortname: paralleltests
             tag: rolling
@@ -206,13 +188,8 @@ jobs:
             cxx: g++
             configureflags: --enable-parallel-unit-test-runner
             moreflags: -lrt
-            gitsetup: true
     container: ghcr.io/lballabio/quantlib-devenv:${{ matrix.tag }}
     steps:
-    - name: Set up git permissions
-      if: ${{ matrix.gitsetup }}
-      run: |
-        git config --global --add safe.directory $GITHUB_WORKSPACE
     - uses: actions/checkout@v3
     - name: Cache
       uses: actions/cache@v3
diff --git a/.github/workflows/sanitizer.yml b/.github/workflows/sanitizer.yml
index 056608e5ffe..8fa9109f6a1 100644
--- a/.github/workflows/sanitizer.yml
+++ b/.github/workflows/sanitizer.yml
@@ -5,9 +5,6 @@ jobs:
     runs-on: ubuntu-latest
     container: ghcr.io/lballabio/quantlib-devenv:rolling
     steps:
-    - name: Set up git permissions
-      run: |
-        git config --global --add safe.directory $GITHUB_WORKSPACE
     - uses: actions/checkout@v3
     - name: Cache
       uses: actions/cache@v3