BRNBW Actions

Small, auditable building blocks for BRNBW GitHub workflows.

Set up SSH

brnbw/actions/setup-ssh starts the runner's system SSH agent, loads a private key, and installs trusted host keys for later workflow steps. It is a Node-free composite action.

- name: Set up SSH
  uses: brnbw/actions/setup-ssh@v1
  with:
    private-key: ${{ secrets.DOKKU_SSH_PRIVATE_KEY }}
    known-hosts: ${{ secrets.DOKKU_SSH_KNOWN_HOSTS }}

- name: Deploy
  run: git push "dokku@${DOKKU_HOST}:${DOKKU_APP}" HEAD:main

For stricter supply-chain control, pin the action to a full commit SHA and let Dependabot propose updates:

uses: brnbw/actions/setup-ssh@0123456789abcdef0123456789abcdef01234567 # v1

Inputs

Input	Required	Description
private-key	Yes	The SSH private key to load into the agent. Pass it from a GitHub secret.
known-hosts	Yes	One or more trusted lines in OpenSSH known_hosts format.

Trusted host keys

Keep the verified host entry in an organization or repository secret such as DOKKU_SSH_KNOWN_HOSTS. Obtain the server's public host key through a trusted channel and verify its fingerprint out of band.

ssh-keyscan can format a host entry, but its output is not authenticated on its own. Do not blindly trust a key first seen during deployment.

License

MIT