mirror of
https://github.com/bybrooklyn/openbitdo.git
synced 2026-03-19 04:12:56 -04:00
release: fix AUR host keys and harden tap auth
This commit is contained in:
11
.github/workflows/aur-publish.yml
vendored
11
.github/workflows/aur-publish.yml
vendored
@@ -90,14 +90,15 @@ jobs:
|
||||
echo "missing required secret: AUR_SSH_PRIVATE_KEY" >&2
|
||||
exit 1
|
||||
fi
|
||||
mkdir -p ~/.ssh
|
||||
echo "${{ secrets.AUR_SSH_PRIVATE_KEY }}" > ~/.ssh/aur
|
||||
chmod 600 ~/.ssh/aur
|
||||
ssh-keyscan -H aur.archlinux.org >> ~/.ssh/known_hosts
|
||||
mkdir -p "$HOME/.ssh"
|
||||
printf '%s\n' "${{ secrets.AUR_SSH_PRIVATE_KEY }}" > "$HOME/.ssh/aur"
|
||||
chmod 600 "$HOME/.ssh/aur"
|
||||
ssh-keyscan -H aur.archlinux.org >> "$HOME/.ssh/known_hosts"
|
||||
chmod 644 "$HOME/.ssh/known_hosts"
|
||||
|
||||
- name: Publish openbitdo and openbitdo-bin
|
||||
env:
|
||||
GIT_SSH_COMMAND: ssh -i ~/.ssh/aur -o IdentitiesOnly=yes
|
||||
GIT_SSH_COMMAND: ssh -i $HOME/.ssh/aur -o IdentitiesOnly=yes -o UserKnownHostsFile=$HOME/.ssh/known_hosts -o StrictHostKeyChecking=accept-new
|
||||
run: |
|
||||
set -euo pipefail
|
||||
publish_pkg() {
|
||||
|
||||
Reference in New Issue
Block a user