diff --git a/.github/workflows/build-windows.yml b/.github/workflows/build-windows.yml
index d73d680f..ede54b0f 100644
--- a/.github/workflows/build-windows.yml
+++ b/.github/workflows/build-windows.yml
@@ -45,6 +45,19 @@ jobs:
         with:
           fetch-depth: 1
 
+      # ---- Git config for LocalSystem ---------------------------------------
+      # The runner service runs as LocalSystem, which has no global git
+      # identity. scripts/monero_c/apply_patches.sh (and a few other
+      # submodule operations) do `git commit`-equivalents that need
+      # user.email + user.name set. Also pre-empt git's "safe.directory"
+      # check, which fires when the checkout dir owner != runner identity.
+      - name: Configure git identity + safe.directory
+        run: |
+          git config --global --add safe.directory '*'
+          git config --global user.email "ci@suchsoftware.com"
+          git config --global user.name "Hash Bags CI"
+          git config --global --list
+
       # ---- Toolchain sanity ------------------------------------------------
       # Our self-hosted runner has Flutter / Rust / VS Build Tools / Inno
       # Setup pre-installed (see scripts/windows/setup-windows-runner.ps1).