From 458bc16f861ee05b7db14c821aa24c2e79d28c71 Mon Sep 17 00:00:00 2001
From: Aaron Delasy <aaron@thelang.io>
Date: Sat, 14 Sep 2024 14:32:34 +0300
Subject: [PATCH] Manually scan key of SSH host

---
 script.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/script.sh b/script.sh
index 3a1c24b..6bb0736 100755
--- a/script.sh
+++ b/script.sh
@@ -18,7 +18,7 @@ else
   remote="$INPUT_USERNAME:$INPUT_PASSWORD@$INPUT_HOST"
 fi
 
-ssh_args=('-o' 'StrictHostKeyChecking=no')
+ssh_args=()
 
 if [ "$INPUT_PRIVATE_KEY" != '' ]; then
   mkdir -p "$HOME/.ssh"
@@ -26,6 +26,8 @@ if [ "$INPUT_PRIVATE_KEY" != '' ]; then
   printf '%s' "$INPUT_PRIVATE_KEY" > "$HOME/.ssh/$INPUT_NAME"
   chmod 600 "$HOME/.ssh/$INPUT_NAME"
   ssh_args+=('-i' "$HOME/.ssh/$INPUT_NAME")
+  ssh-keyscan "$INPUT_HOST" >> "$HOME/.ssh/known_hosts"
+  chmod 600 "$HOME/.ssh/known_hosts"
 fi
 
 scp "${ssh_args[@]}" -P "$INPUT_PORT" "$tmp_dir/$INPUT_NAME.tgz" "$remote:$INPUT_NAME.tgz"