Skip to content

Commit bcb1d7a

Browse files
committed
chmod -> umask
1 parent 69758f6 commit bcb1d7a

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

.github/workflows/ci.yml

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -147,10 +147,11 @@ jobs:
147147
# Create ssh keyfile with locked down permissions and ensure its removal
148148
# Unfortunately process substitution won't work because ssh closes
149149
# all fd > 2
150-
touch /tmp/key
151-
chmod 0600 /tmp/key
150+
(
151+
umask 077
152+
echo "${SSH_KEY}" > /tmp/key
153+
)
152154
trap 'rm -f -- /tmp/key' EXIT
153-
echo "${SSH_KEY}" > /tmp/key
154155
155156
ssh -T "${SERVER}" -p "${PORT}" -i /tmp/key \
156157
-o StrictHostKeyChecking=no \

0 commit comments

Comments
 (0)