pezkuwichain/phishing
1
Fork 0
mirror of https://github.com/pezkuwichain/phishing.git synced 2026-10-20 18:56:29 +00:00
Code Releases Activity

Open an issue when the daily sync fails at any step (#6)

Browse Source 
* fix(sync): open an issue when any step fails, not only when the sync refuses

A failed check, commit or push used to end the job red and nothing else. A
sync that stops without anyone told is how these lists went eight months
stale, so any failure now opens (or comments on) the same issue a refusal
does.

* fix(sync): use the committed GitHub host keys as they are

pezkuwi/github_host_keys already names github.com on every line. The push
step prefixed it again, ssh read "github.com github.com ssh-ed25519 ..." as a
parse error, found no host key, and would have refused every push the sync
made.
This commit is contained in:
SatoshiQaziMuhammed authored and GitHub committed 2026-09-13 17:42:57 +04:00
1 parent 093f6a15dc
commit b52dd1d3c5
1 file changed
+7 -4
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/sync-upstream.yml
+7 -4
View File
@@ -73,20 +73,23 @@ jobs:
umask 077 umask 077
printf '%s\n' "$DEPLOY_KEY" > ~/.ssh/sync_deploy printf '%s\n' "$DEPLOY_KEY" > ~/.ssh/sync_deploy
# GitHub's own host keys, committed in pezkuwi/github_host_keys: nothing learned at run time. # GitHub's own host keys, committed in pezkuwi/github_host_keys: nothing learned at run time.
sed 's|^|github.com |' pezkuwi/github_host_keys > ~/.ssh/known_hosts # The file already names the host on each line; adding it again made ssh reject every key.
cp pezkuwi/github_host_keys ~/.ssh/known_hosts
GIT_SSH_COMMAND="ssh -i $HOME/.ssh/sync_deploy -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes" \ GIT_SSH_COMMAND="ssh -i $HOME/.ssh/sync_deploy -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes" \
git push git@github.com:pezkuwichain/phishing.git HEAD:master git push git@github.com:pezkuwichain/phishing.git HEAD:master
rm -f ~/.ssh/sync_deploy rm -f ~/.ssh/sync_deploy
# Also when a later step failed, a refused push included: a sync that stops silently is how
# these lists went eight months stale.
- name: Ask a person - name: Ask a person
if: steps.sync.outputs.rc != '0' if: failure() || steps.sync.outputs.rc != '0'
env: env:
GH_TOKEN: ${{ github.token }} GH_TOKEN: ${{ github.token }}
run: | run: |
set -euo pipefail set -euo pipefail
title="Upstream list sync stopped and needs a person" title="Upstream list sync stopped and needs a person"
body="$(printf 'The daily sync refused to write the lists.\n\n```\n%s\n```\n\nRun: %s/%s/actions/runs/%s\n' \ body="$(printf 'The daily sync did not bring the lists up to date: it refused them, or a later step (the checks, the commit, the push) failed.\n\n```\n%s\n```\n\nRun: %s/%s/actions/runs/%s\n' \
"$(tail -n 40 sync.out)" "$GITHUB_SERVER_URL" "$GITHUB_REPOSITORY" "$GITHUB_RUN_ID")" "$(tail -n 40 sync.out 2>/dev/null || echo 'no sync output')" "$GITHUB_SERVER_URL" "$GITHUB_REPOSITORY" "$GITHUB_RUN_ID")"
open="$(gh issue list --state open --search "in:title \"$title\"" --json number --jq '.[0].number // empty')" open="$(gh issue list --state open --search "in:title \"$title\"" --json number --jq '.[0].number // empty')"
if [ -n "$open" ]; then gh issue comment "$open" --body "$body"; else gh issue create --title "$title" --body "$body"; fi if [ -n "$open" ]; then gh issue comment "$open" --body "$body"; else gh issue create --title "$title" --body "$body"; fi
exit 1 exit 1