actions/rsync-deployments
1
0
Fork 0
mirror of https://github.com/Burnett01/rsync-deployments.git synced 2026-09-21 18:57:44 +00:00
Code Issues Packages Projects Releases Wiki Activity
146 Commits 19 Branches 24 Tags
400135b4a73663d5d06612bf9f2960d4ab9a3833
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Steven 400135b4a7 fix: only attempt to create dir if not yet exists 
On self-hosted runners it can happen that an action (docker container) is cached. This leads to the script trying to create the .ssh dir despite it already existing. The action then fails.
 2025-12-07 12:31:06 +01:00
Steven 68d1fd5150 chore: 8.0.1 2025-12-06 21:44:40 +00:00
Steven 2c22263f9c fix: regression - using echo instead of printf again #90 
It was found via #90 and #89 that using printf causes problems.
In the previous version 7.1.0 we used echo instead of printf - hence we are bringing this back for version 8.0.x
 2025-12-06 22:33:01 +01:00
Steven 8a39558686 feat: add README for SSH agent and known_hosts management scripts 2025-12-06 19:19:48 +00:00
Steven 0f1cb7924d fix: permissions of docker-rsync scripts 2025-12-06 19:19:26 +00:00
Steven 05a269aeea v8 - 8.0.0 (#88) 
* feat: latest Alpine 3.23.0
* feat: latest Rsync 3.4.1-r1
* feat: integrate [rsync-docker](https://github.com/JoshPiper/rsync-docker/) 3rd party into this action as 1st party code (no more dependency, better audit, single source of truth)
   - backported:
       - agent-start
       - agent-stop
       - agent-askpass
       - agent-add
       - hosts-add
       - hosts-clear
   - new added: 
       - ssh-init
       - hosts-init
   - improved: 
     - stricter permissions on .ssh/ folder (700) and known_hosts (600)
     - use set -eu in all scipts
* feat: new ``strict_host_keys`` option to enable support for strict host key verification. Default: false (to keep backward compatibility)
* feat: new ``debug`` option to see the commands executed (-x) by this action
* feat: this action is now scanned for vulnerabilities by Snyk
* feat; this action is now scanned by CodeQL for Q/A
* feat: this action now performs CI tasks such as Validation, Linting and Unit Tests
* fix: various shell syntax for robustness
* fix: use printf and redirect output to non-stdout instead of echo in sensitive code locations
* refactor: use $HOME instead of tilde ~ for robustness
* feat: cross-platform support
* chore: Deprecate 7.0.2
* chore: EOL 7.0.0 & 7.0.1
 2025-12-06 16:57:20 +01:00
Steven 92961b5880 feat: always force-upgrade alpine openssl 
Force upgrade the alpines openssl to  3.5.4-r0 in order to tackle CVE-2025-9230 (low)
CVE-2025-9231 (low)
CVE-2025-9232 (low)

See: 
https://github.com/Burnett01/rsync-deployments/security/code-scanning/7

https://github.com/Burnett01/rsync-deployments/security/code-scanning/8

https://github.com/Burnett01/rsync-deployments/security/code-scanning/9
 2025-10-07 19:04:58 +02:00
Steven 96abc27e05 fix: snyk-docker-vulnerability-scan sarif 
See https://github.com/github/codeql-action/issues/2187#issuecomment-2043220400
 2025-10-07 18:55:29 +02:00
Steven 7e729bf4dd fix: snyk-docker-vulnerability-scan sarif 
See https://github.com/github/codeql-action/issues/2187#issuecomment-2043220400
 2025-10-07 18:53:39 +02:00
Steven c23b68a9ef chore: snyk output sarif file content 2025-10-07 18:45:23 +02:00
Steven 3e83373c59 fix: snyk-docker-vulnerability-scan sarif 
caused by github/codeql-action#3156
 2025-10-07 18:33:54 +02:00
Steven da6a0e1f57 fix: snyk-docker-vulnerability-scan sarif 
caused by github/codeql-action#3156
 2025-10-07 18:30:41 +02:00
Steven 0b92d76269 fix: snyk-docker-vulnerability-scan sarif 
caused by https://github.com/github/codeql-action/issues/3156
 2025-10-07 18:10:15 +02:00
Steven 3de7ffff44 Revise Media section and add new pingback links 
Updated section title and added media links.
 2025-09-01 12:52:06 +02:00
Steven 9ffbf95175 chore: Add CI badges to README 2025-09-01 12:37:49 +02:00
Steven 02794c2f5a Rename CI workflow file to ci-validating-linting-testing.yml 2025-09-01 12:34:44 +02:00
Steven 7cbc96a81e Rename snyk-container.yml to snyk-docker-vulnerability-scan.yml 2025-09-01 12:34:18 +02:00
Steven 1eeed00fb4 chore: Update CI workflow name for clarity 2025-09-01 12:32:53 +02:00
Steven 581feb8967 Rename workflow to 'Snyk Docker Vulnerability Scan' 2025-09-01 12:31:06 +02:00
Steven fbd408424a feat: Snyk container workflow configuration (#79) 
* Update Snyk container workflow configuration

* Update Docker image name in Snyk workflow

* Update Snyk action to use latest master version
 2025-09-01 12:25:11 +02:00
StevenandCopilot Autofix powered by AI eb1d171493 feat: restrict workflow permissions to PoLP (principle of least privilege) 
Discovered by Code scanning alert no. 6: Workflow does not contain permissions (#78)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
 2025-09-01 11:37:07 +02:00
StevenBurnett01copilot-swe-agent[bot]
 		53581dff6d Add bats tests (#76) 
* Add Bats tests and workflow for entrypoint.sh

* Add Bats tests and workflow

* Add comprehensive GitHub Actions CI workflow (#77)

* Initial plan

* Add comprehensive GitHub Actions CI workflow

Co-authored-by: Burnett01 <1208707+Burnett01@users.noreply.github.com>

* Enhance CI workflow with job dependencies and documentation

Co-authored-by: Burnett01 <1208707+Burnett01@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Burnett01 <1208707+Burnett01@users.noreply.github.com>

* Update CI workflow to only include master branch

---------

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
 2025-08-29 22:50:40 +02:00
Steven 33214bd98b Release/7.1.0 (#72) 
* upgrade to alpine from 3.19 to 3.22.1

Use drinternet/rsync 1.5.1 with alpine 3.22.1

https://hub.docker.com/layers/drinternet/rsync/v1.5.1/images/sha256-e61f4047577b566872764fa39299092adeab691efb3884248dbd6495dc926527

* upgrade to alpine from 3.19 to 3.22.1

Use drinternet/rsync 1.5.1 with alpine 3.22.1

https://hub.docker.com/layers/drinternet/rsync/v1.5.1/images/sha256-e61f4047577b566872764fa39299092adeab691efb3884248dbd6495dc926527

* Alpine 3.22.1

* Update SECURITY.md

* Alpine 3.22.1

* Update LICENSE
 2025-08-29 20:57:37 +02:00
Steven Agyekum 22a7777152 Merge pull request #69 from Burnett01/release/7.0.2 
Release/7.0.2
 2025-01-19 15:36:00 +01:00
Steven Agyekum 3cccb68511 Update SECURITY.md 2025-01-19 15:32:42 +01:00
Steven Agyekum e642759b84 new version 7.0.2 (with rsync 3.4.0), deprecate old versions, remove dead links 
The latest rsync version 3.4.0 fixes a wide variety of CVE's:

CVE-2024-12084 -⁠ Heap Buffer Overflow in Checksum Parsing.

CVE-2024-12085 -⁠ Info Leak via uninitialized Stack contents defeats ASLR.

CVE-2024-12086 -⁠ Server leaks arbitrary client files.

CVE-2024-12087 -⁠ Server can make client write files outside of destination directory using symbolic links.

CVE-2024-12088 -⁠ -⁠-⁠safe-⁠links Bypass.

CVE-2024-12747 -⁠ symlink race condition.

See their press release: https://download.samba.org/pub/rsync/NEWS#3.4.0

The latest action version 7.0.2 is using rsync 3.4.0, so please use that.
 2025-01-19 15:29:07 +01:00
Steven Agyekum 76404482ea always force-upgrade rsync to get the latest security upgrades 2025-01-19 15:19:29 +01:00
Steven Agyekum d19dd4a0be Merge pull request #68 from ilyabrin/patch-1 
Update README.md
 2024-09-22 11:35:23 +02:00
Steven Agyekum 796cf0d5e4 Merge pull request #61 from Burnett01/release/7.0.1 
- Pin @JoshPiper [drinternet/rsync](https://github.com/JoshPiper/rsync-docker) image by SHA-256 hash rather than version.  (Immutability)
Added via #60 

The docker image of this action is now pinned to the specific SHA-256 hash of the version rather than just the version.
This means for the latest `drinternet/rsync:v1.4.4` the corresponding hash is `drinternet/rsync@sha256:15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234`

Check for validation: https://hub.docker.com/layers/drinternet/rsync/v1.4.4/images/sha256-15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234

With that, usage of this action is even more secure due to a consistent dependency chain of trust,
since changes accompanied by a docker image hash are immutable.

Thanks to @XComp
 2024-03-31 18:11:10 +02:00
Steven Agyekum b2bc75ad2c Merge pull request #60 from XComp/use-hash-instead-of-version-tag 
Use SHA instead of Docker version tag for base image to allow for consistent code execution.
 2024-03-31 17:50:56 +02:00
Steven Agyekum 93c0d7acae upd: mention version 7.0.1 2024-03-30 10:49:50 +01:00
Steven Agyekum 13aa4f9f57 update year to 2024 2024-03-30 10:46:13 +01:00
Steven Agyekum e1c5b900e9 Merge pull request #59 from Burnett01/release/7.0.0 
Release/7.0.0
 2024-03-06 15:06:24 +01:00
Steven Agyekum 93f02b856f chore: adjust readme for release 7.0.0 2024-03-06 15:04:26 +01:00
Steven Agyekum 21c0e5a9d9 chore: mention latest Alpine 3.19.1 2024-03-06 14:33:58 +01:00
Steven Agyekum c88a1dbded chore: adjust for EOL, DEPRECATION and MAINTENANCE 2024-03-06 14:33:02 +01:00
Steven Agyekum b9a68ac619 chore!: Versions 4.x EOL, 5.x DEPRECATED, 6.x MAINTENANCE 
- All versions 4.x are now EOL and no longer maintained
- All versions 5.x are now DEPRECATED and will become EOL within Q2 2024
- All versions  6.x are now MAINTENANCE and will become DEPRECATED within Q4 2024
 2024-03-06 12:35:07 +01:00
Steven Agyekum f479c97783 chore: mention new legacy_allow_rsa_hostkeys option 2024-03-06 12:29:40 +01:00
Steven Agyekum 008719532f feat: configuarable legacy RSA hostkeys support 
Ability to configure legacy rsa hostkeys support for
OpenSSH servers < 8.8.
Related to #24 and  9603fc8
 2024-03-06 12:20:39 +01:00
Steven Agyekum 9603fc8186 feat: Make usage of legacy rsa hostkeys conditional 
The usage of RSA host keys introduced with c7baefdc23 
was adjusted to make it conditional/configurable and to keep
backward compatibility
 2024-03-06 12:16:35 +01:00
Steven Agyekum 580c98fc2e Merge pull request #58 from Burnett01/release/5.3 
Backmerge unofficial release/5.3 into new upcoming rlease/7.0.0
 2024-03-06 12:04:45 +01:00
Steven Agyekum ee287eb1f0 feat: Update base image to latest 1.4.4 (apline 3.19.1) 2024-03-06 11:58:08 +01:00
Steven Agyekum c04732dab2 added v6 as new major 2023-06-08 18:05:17 +02:00
Steven Agyekum fb06973f0e Merge pull request #45 from Burnett01/release/6.0.0 
Release/6.0.0
 2023-06-08 17:54:57 +02:00
Steven Agyekum 45d84ad5f6 New version 6.0.0 
- It is no longer possible to use an empty string as remote_path (Fixes #44) (Thanks to @maximilliangeorge)
- Updated checkout action in examples from v2 to v3
- Added disclaimer to media site-links
- Overall readme improvements
 2023-06-08 17:54:10 +02:00
Steven Agyekum d732b39732 improved string empty check for remote_path 2023-06-08 17:35:29 +02:00
Steven Agyekum 570fd6bb52 fix empty string check 2023-06-08 17:27:31 +02:00
Steven Agyekum bef106d127 validate remote_path is not empty 2023-06-08 17:23:41 +02:00
Steven Agyekum b247bfd3af versions correction 2023-06-01 11:49:29 +02:00
Steven Agyekum f17a58e4ba adjust readme with correct versions 2023-06-01 11:48:45 +02:00
Steven Agyekum 48dde0d741 Merge pull request #35 from Burnett01/dependabot/docker/drinternet/rsync-v1.4.2 
Bump drinternet/rsync from v1.4.1 to v1.4.2
 2022-12-11 20:22:59 +01:00
Steven Agyekum 2651e3eecb Merge pull request #34 from Burnett01/release/5.2.1 
Release/5.2.1
 2022-08-01 18:02:21 +02:00
Steven Agyekum a9c15493e0 mention version 5.2.1 2022-08-01 17:59:24 +02:00
Steven Agyekum b107255845 Merge pull request #33 from Burnett01/dependabot/docker/drinternet/rsync-v1.4.1 
Bump drinternet/rsync from v1.4.0 to v1.4.1
 2022-08-01 17:50:38 +02:00
Steven Agyekum d987a9a536 Merge pull request #32 from Burnett01/dependabot/docker/drinternet/rsync-v1.4.1 
Bump drinternet/rsync from v1.4.0 to v1.4.1
 2022-08-01 17:31:49 +02:00
Steven Agyekum d2a4efa87c Update with suggestions from #31 
#31
 2022-07-30 10:19:44 +02:00
Steven Agyekum a078b62820 Merge pull request #24 from jasongill/patch-1 
Re-allow RSA host keys with SSH
 2022-03-24 19:06:39 +01:00
Steven Agyekum 9f40ee1996 version 3.0 is EOL (see #23) 2022-01-01 19:29:16 +01:00
Steven Agyekum 0dc935cdec Merge pull request #23 from Burnett01/feature/maintenance-2022 
Version 5.2
 2022-01-01 19:16:33 +01:00
Steven Agyekum 6ae12186da bump version to 5.2 in Readme 2022-01-01 19:07:03 +01:00
Steven Agyekum 4a950331e5 dropped support for 3.0 2022-01-01 19:02:50 +01:00
Steven Agyekum 057a69d147 Update LICENSE 2022-01-01 19:00:50 +01:00
Steven Agyekum 164dafd7fc Create dependabot.yml 2021-09-01 12:47:46 +02:00
Steven Agyekum b943ffe476 Release/v5.1 (#15) 
* update base image drinternet/rsync:v1.3.0

* Base Image updates:  alpine 3.14.1 latest

* use v5.1 in examples

* support for v5.x

* mention Alpine version
 2021-08-12 18:45:01 +02:00
Steven Agyekum 342e70b07e Release/v5 (#13) 
* Reference JoshPiper/rsync-docker @ 1.1.0

* See: https://github.com/JoshPiper/rsync-docker/tree/1.1.0
* New features: Support passphrase protected keys

* supply SSH_PASS (key passphrase) to agent-add

Read more about the behavior: https://github.com/JoshPiper/rsync-docker#agent-askpass

* add new remote_key_pass config option

* Update README.md

* Update README.md

* 2.0 is EOL

* support 5.0, drop 2.0

* default to empty string

* reference JoshPiper/rsync-docker @ v1.2.0
 2021-08-02 21:57:01 +02:00
Steven Agyekum a93a577f3f add more blogs/media 2021-04-03 15:02:42 +02:00
Steven Agyekum 22f8d1ffe8 2021 2021-01-01 17:46:52 +01:00
Steven Agyekum 695f58ca67 mention blogs 2020-10-05 18:46:16 +02:00
Steven Agyekum b1aa5210b1 Create CONTRIBUTING.md 2020-06-27 15:55:57 +02:00
Steven Agyekum 5aaa93368b Create CODE_OF_CONDUCT.md 2020-06-27 15:55:31 +02:00
Steven Agyekum 248befb7da Create SECURITY.md 2020-06-27 15:53:22 +02:00
Steven Agyekum 23a557dceb Update README.md 2020-06-23 00:08:44 +02:00
Steven Agyekum ea3f2b7314 improve code-formatting 2020-06-22 21:40:12 +02:00
Steven Agyekum 469a77e7aa use actions/checkout@v2 for even faster deployments 
The actions/checkout@v2 action uses a checkout depth of 1 by default.
There is no more need to set it manually.
 2020-03-27 14:55:02 +01:00
Steven Agyekum 819cb701d2 Update README.md 2020-01-08 20:10:18 +01:00
Steven Agyekum c269e19dd0 Changes in 4.0 2020-01-05 14:47:18 +01:00
Steven Agyekum c39ab06b30 Merge pull request #4 from JoshPiper/feat/rsync-image 
Feat/rsync image
 2020-01-05 14:40:05 +01:00
Steven Agyekum d75a44a646 2020 2019-12-31 16:54:40 +01:00
Steven Agyekum c47cfee594 Version 3.0 - faster deployments 
* Feat/new base image
 2019-12-27 16:39:11 +01:00
Steven Agyekum 7e62b51e32 Update README.md 2019-12-27 16:37:44 +01:00
Steven Agyekum f8c929a1f4 Update README.md 2019-12-27 16:33:45 +01:00
Steven Agyekum 6a989b68a1 Update README.md 2019-12-27 16:29:01 +01:00
Steven Agyekum 6fa9b56771 Update Dockerfile 2019-12-27 16:14:47 +01:00
Steven Agyekum f5c5431bf6 Update entrypoint.sh 2019-12-27 16:12:10 +01:00
Steven Agyekum 20b1f5b4b8 Update Dockerfile 2019-12-27 16:11:54 +01:00
Steven Agyekum 1bbe8382e5 Update Dockerfile 2019-12-27 16:08:00 +01:00
Steven Agyekum febcb5ac34 Update README.md 2019-12-04 19:11:03 +01:00
Steven Agyekum 682623851b Update README.md 2019-12-04 19:09:24 +01:00
Steven Agyekum 050c29bcea Update README.md 2019-12-04 19:06:58 +01:00
Steven Agyekum 6093fd5ca1 Update README.md 2019-12-04 19:02:32 +01:00
Steven Agyekum 0186c3a6b2 added INPUT_REMOTE_PORT input for different port 2019-12-04 19:00:33 +01:00
Steven Agyekum 2f8edbc7f1 Update README.md 2019-12-04 18:58:49 +01:00
Steven Agyekum d573c19867 Update action.yml 2019-12-04 18:58:23 +01:00
Steven Agyekum 609b9969e2 version 2.0 
Feature/version 2.0
 2019-12-04 18:50:21 +01:00
Steven Agyekum 1e3e469683 Merge branch 'master' into feature/version-2.0 2019-12-04 18:48:51 +01:00
Steven Agyekum c22c1a5555 Update action.yml 2019-12-04 18:45:06 +01:00
Steven Agyekum 6b3db75d87 Update README.md 2019-12-04 18:41:36 +01:00
Steven Agyekum c4c3b6821b Update README.md 2019-12-04 18:39:07 +01:00
Steven Agyekum 2f0d5a19fa Update README.md 2019-12-04 18:37:11 +01:00
Steven Agyekum 5536ad8c42 Update README.md 2019-12-04 18:35:52 +01:00