Skip to content

chore: add golangci-lint to ci#79

Closed
lsytj0413 wants to merge 1 commit into
nextlevelbuilder:mainfrom
lsytj0413:update-ci
Closed

chore: add golangci-lint to ci#79
lsytj0413 wants to merge 1 commit into
nextlevelbuilder:mainfrom
lsytj0413:update-ci

Conversation

@lsytj0413
Copy link
Copy Markdown
Contributor

No description provided.

@lsytj0413 lsytj0413 force-pushed the update-ci branch 2 times, most recently from 583dbba to e34f07d Compare March 8, 2026 06:44
@viettranx viettranx closed this Mar 20, 2026
mrgoonie added a commit that referenced this pull request May 28, 2026
)

* fix(ci): base64-encode zuey SSH key secret to dodge libcrypto error

First real deploy_zuey_beta run failed at the new 'Sync zuey ops scripts
to VPS' step with 'Load key: error in libcrypto' / Permission denied,
because GitHub Secrets storage normalized newlines inside the multi-line
PEM block.

Switch the secret to ZUEY_SSH_PRIVATE_KEY_B64 (single-line base64) and
base64 -d it on the runner. Single-line storage is immune to whitespace
mangling. Add a ssh-keygen -y -f pre-flight check that fails fast with
a clear remediation message if either the base64 or the decoded key is
malformed.

Refs: workflow run 26499549166

* fix(ci): create SSH key at 0600 from birth via umask 077

Defense-in-depth from review of PR #79: wrap the base64-decode pipeline
in a subshell that sets umask 077 so the decoded private key file is
created at 0600 directly, instead of relying on a chmod 0600 after the
fact (which left a brief 0644 window).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants