commit aa2422e830c9d5d839e94a3b35d867ac5cd38d9a (tree) parent 87aa052e2395ab3cab89b8afaaf6156bfd3f930b Author: Andrew Kelley <andrew@ziglang.org> Date: Thu, 7 Jan 2021 12:28:55 -0700 ci: add github.com's public key for the ssh clone Diffstat:
| M | ci/srht/update_download_page | | | 4 | ++++ |
1 file changed, 4 insertions(+), 0 deletions(-)
diff --git a/ci/srht/update_download_page b/ci/srht/update_download_page @@ -68,6 +68,10 @@ export X86_64_FREEBSD_TARBALL="$(echo "$X86_64_FREEBSD_JSON" | jq .tarball -r)" export X86_64_FREEBSD_BYTESIZE="$(echo "$X86_64_FREEBSD_JSON" | jq .size -r)" export X86_64_FREEBSD_SHASUM="$(echo "$X86_64_FREEBSD_JSON" | jq .shasum -r)" +# Refresh this with `ssh-keyscan github.com` from a trusted Internet connection. +# We hard code the public key here to detect man-in-the-middle attacks. +echo "github.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==" >> ~/.ssh/known_hosts + git clone git@github.com:ziglang/www.ziglang.org.git cd www.ziglang.org git checkout hugo-redesign