actions/rsync-deployments
1
0
Fork 0
mirror of https://github.com/Burnett01/rsync-deployments.git synced 2026-09-21 18:57:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
176 Commits 19 Branches 24 Tags
rc/8.0.0
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Steven 3c51abe2e5 chore: update readme 2025-12-06 15:35:59 +00:00
Steven 02b1a9758c chore: readme changes 2025-12-06 15:23:53 +00:00
Steven d966acdf6c chore: fix version pin 2025-12-06 15:22:24 +00:00
Steven b9d74ae5ae feat: Alpine 3.23.0 2025-12-06 15:20:42 +00:00
Steven 2bed3fc0f7 chore: include latest version 2025-12-06 14:50:32 +00:00
Steven d4403aa37e refactor: remove -o because of commit 6cb3f8196c 2025-12-06 14:19:54 +00:00
Steven 2e3a6dbe55 refactor: bring back package-shifting 
Ability to allow for more recent apk versions.
 2025-12-06 14:09:20 +00:00
Burnett01 77cf0f30ae refactor: pin alpine 3.22.1 + remove --upgrade to avoid package drift 2025-12-02 18:14:43 +00:00
Burnett01 35c5778c2d refactor: bats tests to cover STRICT_HOSTKEYS_CHECKING + assert whole rsync command 2025-12-02 17:08:29 +00:00
Burnett01 09f62ba15b chore: force-upgrade alpine busybox to tackle CVE-2024-58251 
See: https://github.com/Burnett01/rsync-deployments/security/code-scanning/15
 2025-12-02 15:17:42 +00:00
Burnett01 6cb3f8196c refactor: SC3040 (warning): In POSIX sh, set option pipefail is undefined. 2025-12-02 15:15:01 +00:00
Burnett01 d4d84ba02c chore: upgrade alpine 3.22.2 2025-12-02 15:09:19 +00:00
Burnett01 bf2d964f6f fix: remove debug output of known_hosts file in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 e0b7fb752e fix: replace tilde with $HOME for consistent path usage in scripts 2025-12-02 14:52:50 +00:00
Burnett01 61419b36d6 fix: remove debug output and known_hosts file display in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 a1f741433d fix: remove debug output of known_hosts file in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 bf4dca9d8e fix: replace echo with printf for consistent output formatting in hosts-add script 2025-12-02 14:52:50 +00:00
Burnett01 4369819153 debug 2025-12-02 14:52:50 +00:00
Burnett01 d4a9011612 fix: correct command substitution syntax for ssh-keyscan output processing 2025-12-02 14:52:50 +00:00
Burnett01 4b49843a52 fix: update strict host key checking to include known hosts file 2025-12-02 14:52:50 +00:00
Burnett01 1b2e963616 fix: filter out comments from ssh-keyscan output for strict host key checking 2025-12-02 14:52:50 +00:00
Burnett01 f85e1bae12 feat: add hosts-add script to manage SSH known hosts 2025-12-02 14:52:50 +00:00
Burnett01 8e8f89cdc5 feat: add host key verification and handling for strict host key checking 2025-12-02 14:52:50 +00:00
Burnett01 e9f72e6ef0 fix: use GITHUB_ACTION variable for SSH agent start in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 055751bf9e fix: correct debug mode setting in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 8bb0d8b3ce fix: correct debug mode setting in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 7293bea8ec feat: add debug input to action and enable debug mode in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 93eda1c97c fix: ensure proper initialization and cleanup of known hosts in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 7b075b3367 feat: add hosts-clear and hosts-init scripts for managing known_hosts 2025-12-02 14:52:50 +00:00
Burnett01 c0170dd157 fix: correct variable name for INPUT_SWITCHES in rsync command execution 2025-12-02 14:52:50 +00:00
Burnett01 82725684f9 fix: replace exec with sh -c for rsync command execution in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 7bf29be338 fix: remove unnecessary quotes around INPUT_SWITCHES in rsync command 2025-12-02 14:52:50 +00:00
Burnett01 069d4f1b5c fix: handle unset SSH_AGENT_PID variable in agent-start script 2025-12-02 14:52:50 +00:00
Burnett01 0fb32f477b fix: change SSH agent start argument to default in entrypoint script 2025-12-02 14:52:50 +00:00
Burnett01 844957283c fix: update Dockerfile to correct chmod command for agent scripts 2025-12-02 14:52:50 +00:00
Burnett01 9b1bf7278e feat: rsync-docker as first-party code, configureable strict host keys checking 2025-12-02 14:52:50 +00:00
Steven 92961b5880 feat: always force-upgrade alpine openssl 
Force upgrade the alpines openssl to  3.5.4-r0 in order to tackle CVE-2025-9230 (low)
CVE-2025-9231 (low)
CVE-2025-9232 (low)

See: 
https://github.com/Burnett01/rsync-deployments/security/code-scanning/7

https://github.com/Burnett01/rsync-deployments/security/code-scanning/8

https://github.com/Burnett01/rsync-deployments/security/code-scanning/9
 2025-10-07 19:04:58 +02:00
Steven 96abc27e05 fix: snyk-docker-vulnerability-scan sarif 
See https://github.com/github/codeql-action/issues/2187#issuecomment-2043220400
 2025-10-07 18:55:29 +02:00
Steven 7e729bf4dd fix: snyk-docker-vulnerability-scan sarif 
See https://github.com/github/codeql-action/issues/2187#issuecomment-2043220400
 2025-10-07 18:53:39 +02:00
Steven c23b68a9ef chore: snyk output sarif file content 2025-10-07 18:45:23 +02:00
Steven 3e83373c59 fix: snyk-docker-vulnerability-scan sarif 
caused by github/codeql-action#3156
 2025-10-07 18:33:54 +02:00
Steven da6a0e1f57 fix: snyk-docker-vulnerability-scan sarif 
caused by github/codeql-action#3156
 2025-10-07 18:30:41 +02:00
Steven 0b92d76269 fix: snyk-docker-vulnerability-scan sarif 
caused by https://github.com/github/codeql-action/issues/3156
 2025-10-07 18:10:15 +02:00
Steven 3de7ffff44 Revise Media section and add new pingback links 
Updated section title and added media links.
 2025-09-01 12:52:06 +02:00
Steven 9ffbf95175 chore: Add CI badges to README 2025-09-01 12:37:49 +02:00
Steven 02794c2f5a Rename CI workflow file to ci-validating-linting-testing.yml 2025-09-01 12:34:44 +02:00
Steven 7cbc96a81e Rename snyk-container.yml to snyk-docker-vulnerability-scan.yml 2025-09-01 12:34:18 +02:00
Steven 1eeed00fb4 chore: Update CI workflow name for clarity 2025-09-01 12:32:53 +02:00
Steven 581feb8967 Rename workflow to 'Snyk Docker Vulnerability Scan' 2025-09-01 12:31:06 +02:00
Steven fbd408424a feat: Snyk container workflow configuration (#79) 
* Update Snyk container workflow configuration

* Update Docker image name in Snyk workflow

* Update Snyk action to use latest master version
 2025-09-01 12:25:11 +02:00
StevenandCopilot Autofix powered by AI eb1d171493 feat: restrict workflow permissions to PoLP (principle of least privilege) 
Discovered by Code scanning alert no. 6: Workflow does not contain permissions (#78)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
 2025-09-01 11:37:07 +02:00
StevenBurnett01copilot-swe-agent[bot]
 		53581dff6d Add bats tests (#76) 
* Add Bats tests and workflow for entrypoint.sh

* Add Bats tests and workflow

* Add comprehensive GitHub Actions CI workflow (#77)

* Initial plan

* Add comprehensive GitHub Actions CI workflow

Co-authored-by: Burnett01 <1208707+Burnett01@users.noreply.github.com>

* Enhance CI workflow with job dependencies and documentation

Co-authored-by: Burnett01 <1208707+Burnett01@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Burnett01 <1208707+Burnett01@users.noreply.github.com>

* Update CI workflow to only include master branch

---------

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
 2025-08-29 22:50:40 +02:00
Steven 33214bd98b Release/7.1.0 (#72) 
* upgrade to alpine from 3.19 to 3.22.1

Use drinternet/rsync 1.5.1 with alpine 3.22.1

https://hub.docker.com/layers/drinternet/rsync/v1.5.1/images/sha256-e61f4047577b566872764fa39299092adeab691efb3884248dbd6495dc926527

* upgrade to alpine from 3.19 to 3.22.1

Use drinternet/rsync 1.5.1 with alpine 3.22.1

https://hub.docker.com/layers/drinternet/rsync/v1.5.1/images/sha256-e61f4047577b566872764fa39299092adeab691efb3884248dbd6495dc926527

* Alpine 3.22.1

* Update SECURITY.md

* Alpine 3.22.1

* Update LICENSE
 2025-08-29 20:57:37 +02:00
Steven Agyekum 22a7777152 Merge pull request #69 from Burnett01/release/7.0.2 
Release/7.0.2
 2025-01-19 15:36:00 +01:00
Steven Agyekum 3cccb68511 Update SECURITY.md 2025-01-19 15:32:42 +01:00
Steven Agyekum e642759b84 new version 7.0.2 (with rsync 3.4.0), deprecate old versions, remove dead links 
The latest rsync version 3.4.0 fixes a wide variety of CVE's:

CVE-2024-12084 -⁠ Heap Buffer Overflow in Checksum Parsing.

CVE-2024-12085 -⁠ Info Leak via uninitialized Stack contents defeats ASLR.

CVE-2024-12086 -⁠ Server leaks arbitrary client files.

CVE-2024-12087 -⁠ Server can make client write files outside of destination directory using symbolic links.

CVE-2024-12088 -⁠ -⁠-⁠safe-⁠links Bypass.

CVE-2024-12747 -⁠ symlink race condition.

See their press release: https://download.samba.org/pub/rsync/NEWS#3.4.0

The latest action version 7.0.2 is using rsync 3.4.0, so please use that.
 2025-01-19 15:29:07 +01:00
Steven Agyekum 76404482ea always force-upgrade rsync to get the latest security upgrades 2025-01-19 15:19:29 +01:00
Steven Agyekum d19dd4a0be Merge pull request #68 from ilyabrin/patch-1 
Update README.md
 2024-09-22 11:35:23 +02:00
Steven Agyekum 796cf0d5e4 Merge pull request #61 from Burnett01/release/7.0.1 
- Pin @JoshPiper [drinternet/rsync](https://github.com/JoshPiper/rsync-docker) image by SHA-256 hash rather than version.  (Immutability)
Added via #60 

The docker image of this action is now pinned to the specific SHA-256 hash of the version rather than just the version.
This means for the latest `drinternet/rsync:v1.4.4` the corresponding hash is `drinternet/rsync@sha256:15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234`

Check for validation: https://hub.docker.com/layers/drinternet/rsync/v1.4.4/images/sha256-15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234

With that, usage of this action is even more secure due to a consistent dependency chain of trust,
since changes accompanied by a docker image hash are immutable.

Thanks to @XComp
 2024-03-31 18:11:10 +02:00
Steven Agyekum b2bc75ad2c Merge pull request #60 from XComp/use-hash-instead-of-version-tag 
Use SHA instead of Docker version tag for base image to allow for consistent code execution.
 2024-03-31 17:50:56 +02:00
Steven Agyekum 93c0d7acae upd: mention version 7.0.1 2024-03-30 10:49:50 +01:00
Steven Agyekum 13aa4f9f57 update year to 2024 2024-03-30 10:46:13 +01:00
Steven Agyekum e1c5b900e9 Merge pull request #59 from Burnett01/release/7.0.0 
Release/7.0.0
 2024-03-06 15:06:24 +01:00
Steven Agyekum 93f02b856f chore: adjust readme for release 7.0.0 2024-03-06 15:04:26 +01:00
Steven Agyekum 21c0e5a9d9 chore: mention latest Alpine 3.19.1 2024-03-06 14:33:58 +01:00
Steven Agyekum c88a1dbded chore: adjust for EOL, DEPRECATION and MAINTENANCE 2024-03-06 14:33:02 +01:00
Steven Agyekum b9a68ac619 chore!: Versions 4.x EOL, 5.x DEPRECATED, 6.x MAINTENANCE 
- All versions 4.x are now EOL and no longer maintained
- All versions 5.x are now DEPRECATED and will become EOL within Q2 2024
- All versions  6.x are now MAINTENANCE and will become DEPRECATED within Q4 2024
 2024-03-06 12:35:07 +01:00
Steven Agyekum f479c97783 chore: mention new legacy_allow_rsa_hostkeys option 2024-03-06 12:29:40 +01:00
Steven Agyekum 008719532f feat: configuarable legacy RSA hostkeys support 
Ability to configure legacy rsa hostkeys support for
OpenSSH servers < 8.8.
Related to #24 and  9603fc8
 2024-03-06 12:20:39 +01:00
Steven Agyekum 9603fc8186 feat: Make usage of legacy rsa hostkeys conditional 
The usage of RSA host keys introduced with c7baefdc23 
was adjusted to make it conditional/configurable and to keep
backward compatibility
 2024-03-06 12:16:35 +01:00
Steven Agyekum 580c98fc2e Merge pull request #58 from Burnett01/release/5.3 
Backmerge unofficial release/5.3 into new upcoming rlease/7.0.0
 2024-03-06 12:04:45 +01:00
Steven Agyekum ee287eb1f0 feat: Update base image to latest 1.4.4 (apline 3.19.1) 2024-03-06 11:58:08 +01:00
Steven Agyekum c04732dab2 added v6 as new major 2023-06-08 18:05:17 +02:00
Steven Agyekum fb06973f0e Merge pull request #45 from Burnett01/release/6.0.0 
Release/6.0.0
 2023-06-08 17:54:57 +02:00
Steven Agyekum 45d84ad5f6 New version 6.0.0 
- It is no longer possible to use an empty string as remote_path (Fixes #44) (Thanks to @maximilliangeorge)
- Updated checkout action in examples from v2 to v3
- Added disclaimer to media site-links
- Overall readme improvements
 2023-06-08 17:54:10 +02:00
Steven Agyekum d732b39732 improved string empty check for remote_path 2023-06-08 17:35:29 +02:00
Steven Agyekum 570fd6bb52 fix empty string check 2023-06-08 17:27:31 +02:00
Steven Agyekum bef106d127 validate remote_path is not empty 2023-06-08 17:23:41 +02:00
Steven Agyekum b247bfd3af versions correction 2023-06-01 11:49:29 +02:00
Steven Agyekum f17a58e4ba adjust readme with correct versions 2023-06-01 11:48:45 +02:00
Steven Agyekum 48dde0d741 Merge pull request #35 from Burnett01/dependabot/docker/drinternet/rsync-v1.4.2 
Bump drinternet/rsync from v1.4.1 to v1.4.2
 2022-12-11 20:22:59 +01:00
Steven Agyekum 2651e3eecb Merge pull request #34 from Burnett01/release/5.2.1 
Release/5.2.1
 2022-08-01 18:02:21 +02:00
Steven Agyekum a9c15493e0 mention version 5.2.1 2022-08-01 17:59:24 +02:00
Steven Agyekum b107255845 Merge pull request #33 from Burnett01/dependabot/docker/drinternet/rsync-v1.4.1 
Bump drinternet/rsync from v1.4.0 to v1.4.1
 2022-08-01 17:50:38 +02:00
Steven Agyekum d987a9a536 Merge pull request #32 from Burnett01/dependabot/docker/drinternet/rsync-v1.4.1 
Bump drinternet/rsync from v1.4.0 to v1.4.1
 2022-08-01 17:31:49 +02:00
Steven Agyekum d2a4efa87c Update with suggestions from #31 
#31
 2022-07-30 10:19:44 +02:00
Steven Agyekum a078b62820 Merge pull request #24 from jasongill/patch-1 
Re-allow RSA host keys with SSH
 2022-03-24 19:06:39 +01:00
Steven Agyekum 9f40ee1996 version 3.0 is EOL (see #23) 2022-01-01 19:29:16 +01:00
Steven Agyekum 0dc935cdec Merge pull request #23 from Burnett01/feature/maintenance-2022 
Version 5.2
 2022-01-01 19:16:33 +01:00
Steven Agyekum 6ae12186da bump version to 5.2 in Readme 2022-01-01 19:07:03 +01:00
Steven Agyekum 4a950331e5 dropped support for 3.0 2022-01-01 19:02:50 +01:00
Steven Agyekum 057a69d147 Update LICENSE 2022-01-01 19:00:50 +01:00
Steven Agyekum 164dafd7fc Create dependabot.yml 2021-09-01 12:47:46 +02:00
Steven Agyekum b943ffe476 Release/v5.1 (#15) 
* update base image drinternet/rsync:v1.3.0

* Base Image updates:  alpine 3.14.1 latest

* use v5.1 in examples

* support for v5.x

* mention Alpine version
 2021-08-12 18:45:01 +02:00
Steven Agyekum 342e70b07e Release/v5 (#13) 
* Reference JoshPiper/rsync-docker @ 1.1.0

* See: https://github.com/JoshPiper/rsync-docker/tree/1.1.0
* New features: Support passphrase protected keys

* supply SSH_PASS (key passphrase) to agent-add

Read more about the behavior: https://github.com/JoshPiper/rsync-docker#agent-askpass

* add new remote_key_pass config option

* Update README.md

* Update README.md

* 2.0 is EOL

* support 5.0, drop 2.0

* default to empty string

* reference JoshPiper/rsync-docker @ v1.2.0
 2021-08-02 21:57:01 +02:00
Steven Agyekum a93a577f3f add more blogs/media 2021-04-03 15:02:42 +02:00
Steven Agyekum 22f8d1ffe8 2021 2021-01-01 17:46:52 +01:00
Steven Agyekum 695f58ca67 mention blogs 2020-10-05 18:46:16 +02:00
Steven Agyekum b1aa5210b1 Create CONTRIBUTING.md 2020-06-27 15:55:57 +02:00
Steven Agyekum 5aaa93368b Create CODE_OF_CONDUCT.md 2020-06-27 15:55:31 +02:00