spank-olm

commit 2c6e0ad7a3833c51af8ca18c3bf0ddc11f9ac657
parent de15127aea5db8c33be13077127c9ab2daf7d8aa
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue, 15 Apr 2025 11:02:04 +0200

Fix login issues by using ssh

Diffstat:
M
.github/workflows/cflite_batch.yml
 | 
21
++++++++++++++++++---
M
.github/workflows/cflite_cron.yml
 | 
34
++++++++++++++++++++++++++++++++--
M
.github/workflows/cflite_pr.yml
 | 
19
+++++++++++++++++--

3 files changed, 67 insertions(+), 7 deletions(-)
diff --git a/.github/workflows/cflite_batch.yml b/.github/workflows/cflite_batch.yml
@@ -15,20 +15,35 @@ jobs:
           - undefined
           - memory
     steps:
+      - name: Add SSH key
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
+        run: |
+          mkdir -p /home/runner/.ssh
+          ssh-keyscan github.com >> /home/runner/.ssh/known_hosts
+          # STORAGE_SSH_KEY is the name of the repository secret
+          echo "${{ secrets.STORAGE_SSH_KEY }}" > /home/runner/.ssh/github_actions
+          chmod 600 /home/runner/.ssh/github_actions
+          ssh-agent -a $SSH_AUTH_SOCK > /dev/null	
+          ssh-add /home/runner/.ssh/github_actions
       - name: Build Fuzzers (${{ matrix.sanitizer }})
         id: build
         uses: google/clusterfuzzlite/actions/build_fuzzers@v1
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         with:
           language: c++
           sanitizer: ${{ matrix.sanitizer }}
-          storage-repo: https://github.com/MTRNord/spank_olm_fuzz_storage.git
+          storage-repo: git@github.com:MTRNord/spank_olm_fuzz_storage.git
       - name: Run Fuzzers (${{ matrix.sanitizer }})
         id: run
         uses: google/clusterfuzzlite/actions/run_fuzzers@v1
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           fuzz-seconds: 3600
           mode: 'batch'
           sanitizer: ${{ matrix.sanitizer }}
           output-sarif: true
-          storage-repo: https://github.com/MTRNord/spank_olm_fuzz_storage.git
-\ No newline at end of file
+          storage-repo: git@github.com:MTRNord/spank_olm_fuzz_storage.git
+\ No newline at end of file
diff --git a/.github/workflows/cflite_cron.yml b/.github/workflows/cflite_cron.yml
@@ -7,15 +7,30 @@ jobs:
   Pruning:
     runs-on: ubuntu-latest
     steps:
+      - name: Add SSH key
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
+        run: |
+          mkdir -p /home/runner/.ssh
+          ssh-keyscan github.com >> /home/runner/.ssh/known_hosts
+          # STORAGE_SSH_KEY is the name of the repository secret
+          echo "${{ secrets.STORAGE_SSH_KEY }}" > /home/runner/.ssh/github_actions
+          chmod 600 /home/runner/.ssh/github_actions
+          ssh-agent -a $SSH_AUTH_SOCK > /dev/null	
+          ssh-add /home/runner/.ssh/github_actions
       - name: Build Fuzzers
         id: build
         uses: google/clusterfuzzlite/actions/build_fuzzers@v1
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         with:
           language: c++
           storage-repo: https://github.com/MTRNord/spank_olm_fuzz_storage.git
       - name: Run Fuzzers
         id: run
         uses: google/clusterfuzzlite/actions/run_fuzzers@v1
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           fuzz-seconds: 600
@@ -25,20 +40,35 @@ jobs:
   Coverage:
     runs-on: ubuntu-latest
     steps:
+      - name: Add SSH key
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
+        run: |
+          mkdir -p /home/runner/.ssh
+          ssh-keyscan github.com >> /home/runner/.ssh/known_hosts
+          # STORAGE_SSH_KEY is the name of the repository secret
+          echo "${{ secrets.STORAGE_SSH_KEY }}" > /home/runner/.ssh/github_actions
+          chmod 600 /home/runner/.ssh/github_actions
+          ssh-agent -a $SSH_AUTH_SOCK > /dev/null	
+          ssh-add /home/runner/.ssh/github_actions
       - name: Build Fuzzers
         id: build
         uses: google/clusterfuzzlite/actions/build_fuzzers@v1
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         with:
           language: c++
           sanitizer: coverage
-          storage-repo: https://github.com/MTRNord/spank_olm_fuzz_storage.git
+          storage-repo: git@github.com:MTRNord/spank_olm_fuzz_storage.git
       - name: Run Fuzzers
         id: run
         uses: google/clusterfuzzlite/actions/run_fuzzers@v1
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           fuzz-seconds: 600
           mode: 'coverage'
           sanitizer: 'coverage'
-          storage-repo: https://github.com/MTRNord/spank_olm_fuzz_storage.git
+          storage-repo: git@github.com:MTRNord/spank_olm_fuzz_storage.git
 
diff --git a/.github/workflows/cflite_pr.yml b/.github/workflows/cflite_pr.yml
@@ -18,21 +18,36 @@ jobs:
           - undefined
           - memory
     steps:
+      - name: Add SSH key
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
+        run: |
+          mkdir -p /home/runner/.ssh
+          ssh-keyscan github.com >> /home/runner/.ssh/known_hosts
+          # STORAGE_SSH_KEY is the name of the repository secret
+          echo "${{ secrets.STORAGE_SSH_KEY }}" > /home/runner/.ssh/github_actions
+          chmod 600 /home/runner/.ssh/github_actions
+          ssh-agent -a $SSH_AUTH_SOCK > /dev/null	
+          ssh-add /home/runner/.ssh/github_actions
       - name: Build Fuzzers (${{ matrix.sanitizer }})
         id: build
         uses: google/clusterfuzzlite/actions/build_fuzzers@v1
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         with:
           language: c++
           github-token: ${{ secrets.GITHUB_TOKEN }}
           sanitizer: ${{ matrix.sanitizer }}
-          storage-repo: https://github.com/MTRNord/spank_olm_fuzz_storage.git
+          storage-repo: git@github.com:MTRNord/spank_olm_fuzz_storage.git
       - name: Run Fuzzers (${{ matrix.sanitizer }})
         id: run
         uses: google/clusterfuzzlite/actions/run_fuzzers@v1
+        env:
+          SSH_AUTH_SOCK: /tmp/ssh_agent.sock
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           fuzz-seconds: 600
           mode: 'code-change'
           sanitizer: ${{ matrix.sanitizer }}
           output-sarif: true
-          storage-repo: https://github.com/MTRNord/spank_olm_fuzz_storage.git
+          storage-repo: git@github.com:MTRNord/spank_olm_fuzz_storage.git