mirror of
https://github.com/ruby/ruby.git
synced 2026-01-28 04:54:23 +00:00
post_push.yml: Write the SSH key more securely
Co-authored-by: Nobuyoshi Nakada <nobu@ruby-lang.org>
This commit is contained in:
parent
77b019f656
commit
501dd27eb2
3
.github/workflows/post_push.yml
vendored
3
.github/workflows/post_push.yml
vendored
@ -13,8 +13,7 @@ jobs:
|
||||
- name: Sync git.ruby-lang.org
|
||||
run: |
|
||||
mkdir -p ~/.ssh
|
||||
echo "$RUBY_GIT_SYNC_PRIVATE_KEY" > ~/.ssh/id_ed25519
|
||||
chmod 600 ~/.ssh/id_ed25519
|
||||
(umask 066; printenv RUBY_GIT_SYNC_PRIVATE_KEY > ~/.ssh/id_ed25519)
|
||||
ssh-keyscan -t ed25519 git.ruby-lang.org >> ~/.ssh/known_hosts
|
||||
ssh -i ~/.ssh/id_ed25519 git-sync@git.ruby-lang.org "sudo -u git /home/git/git.ruby-lang.org/bin/update-ruby.sh $GITHUB_REF"
|
||||
env:
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user