~ Rebuild Image

.gitea/workflows/cd.yaml

@@ -16,14 +16,14 @@ jobs:
     - uses: actions/checkout@v2
     - name: Install kpack-cli
       env:
-        KPACK_CLI_VERSION: "0.13.0"
+        KPACK_CLI_VERSION: 0.13.0
+        KPACK_CLI_SHA256: 52f0c927a1350f4f1bb281575ec246f406fb96aa69dc974ed10a2fe52c538158
       working-directory: /tmp
       run: |
-        mkdir kp-binaries
-        curl -sL "https://github.com/buildpacks-community/kpack-cli/releases/download/v${KPACK_CLI_VERSION}/kp-linux-amd64-${KPACK_CLI_VERSION}" -o kp-binaries/kp-linux-amd64-${KPACK_CLI_VERSION}
-        curl -sLO "https://github.com/buildpacks-community/kpack-cli/releases/download/v${KPACK_CLI_VERSION}/kp-linux-amd64-${KPACK_CLI_VERSION}.sha256"
-        sha256sum -c kp-linux-amd64-${KPACK_CLI_VERSION}.sha256 || exit 1
-        sudo mv kp-binaries/kp-linux-amd64-${KPACK_CLI_VERSION} /usr/local/bin/kp
+        set -ex
+        curl -sLO "https://github.com/buildpacks-community/kpack-cli/releases/download/v${KPACK_CLI_VERSION}/kp-linux-amd64-${KPACK_CLI_VERSION}"
+        echo "${KPACK_CLI_SHA256} kp-linux-amd64-${KPACK_CLI_VERSION}" | sha256sum --check || exit 1
+        sudo mv kp-linux-amd64-${KPACK_CLI_VERSION} /usr/local/bin/kp
         sudo chmod +x /usr/local/bin/kp
         kp version
     - name: Install kubectl

.github/workflows/cicd.yaml

@@ -7,11 +7,16 @@ jobs:
   build-image-and-deploy:
     runs-on: ubuntu-latest
     steps:
+
     - uses: actions/checkout@v3
       with:
         fetch-depth: 0
-    - uses: yesolutions/mirror-action@master
+
+    - uses: felegy/mirror-action@master
       with:
-        REMOTE: ${{ secrets.DEPLOY_REPO_URL }}
-        GIT_USERNAME: ${{ secrets.DEPLOY_REPO_USERNAME }}
-        GIT_PASSWORD: ${{ secrets.DEPLOY_REPO_TOKEN }}
+        REMOTE: git@${{ secrets.DEPLOY_REPO }}:${{ github.repository }}.git
+        SSH_CONFIG: |
+          Host ${{ secrets.DEPLOY_REPO }}
+            ProxyCommand cloudflared access ssh --hostname %h
+        GIT_SSH_PRIVATE_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
+        GIT_SSH_NO_VERIFY_HOST: "true"