diff --git a/dev/docker/entrypoint.app.sh b/dev/docker/entrypoint.app.sh
index b09edda88..5da7c247c 100755
--- a/dev/docker/entrypoint.app.sh
+++ b/dev/docker/entrypoint.app.sh
@@ -1,5 +1,9 @@
 #!/bin/bash
 
+# Git 2.35+ may refuse to operate on bind-mounted repos with differing ownership ("dubious ownership").
+# Mark /app as safe within the container.
+git config --global --add safe.directory /app 2>/dev/null || true
+
 set -e
 
 env
diff --git a/dev/docker/entrypoint.node.sh b/dev/docker/entrypoint.node.sh
index a8f33fd3d..b8cc0d7fb 100755
--- a/dev/docker/entrypoint.node.sh
+++ b/dev/docker/entrypoint.node.sh
@@ -1,5 +1,9 @@
 #!/bin/sh
 
+# Git 2.35+ may refuse to operate on bind-mounted repos with differing ownership ("dubious ownership").
+# Mark /app as safe within the container.
+git config --global --add safe.directory /app 2>/dev/null || true
+
 set -e
 
 npm install