From 0cfc04c772e6071fe938fb85361c6b7af2a29461 Mon Sep 17 00:00:00 2001 From: Paul Gottschling Date: Mon, 13 Jan 2025 12:09:31 -0500 Subject: [PATCH] Trust GitHub SSH key fingerprints --- scripts/update_submodules.sh | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/scripts/update_submodules.sh b/scripts/update_submodules.sh index 36afee2..6a14fdd 100755 --- a/scripts/update_submodules.sh +++ b/scripts/update_submodules.sh @@ -1,7 +1,14 @@ #!/bin/bash +# Trust GitHub key fingerprints +cat< ~/.ssh/known_hosts +github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOMqqnkVzrm0SdG6UOoqKLsabgH5C9okWi0dh2l9GKJl +github.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBEmKSENjQEezOmxkZMy7opKgwFB9nkt5YRrYMjNuG5N87uRgg6CLrbo5wAdT/y6v0mKV0U2w0WZ2YB/++Tpockg= +github.com ssh-rsa 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 +EOF + # For debugging SSH transport. Delete when no longer needed. -git config --global set core.sshCommand "ssh -vvv" +git config set core.sshCommand "ssh -vvv" # Fetch all submodule refs on a local machine. On the AWS Amplify build runner, # only execute a shallow fetch with a single branch.