Steven
0f1cb7924d
fix: permissions of docker-rsync scripts
2025-12-06 19:19:26 +00:00
Steven
05a269aeea
v8 - 8.0.0 ( #88 )
...
* feat: latest Alpine 3.23.0
* feat: latest Rsync 3.4.1-r1
* feat: integrate [rsync-docker](https://github.com/JoshPiper/rsync-docker/ ) 3rd party into this action as 1st party code (no more dependency, better audit, single source of truth)
- backported:
- agent-start
- agent-stop
- agent-askpass
- agent-add
- hosts-add
- hosts-clear
- new added:
- ssh-init
- hosts-init
- improved:
- stricter permissions on .ssh/ folder (700) and known_hosts (600)
- use set -eu in all scipts
* feat: new ``strict_host_keys`` option to enable support for strict host key verification. Default: false (to keep backward compatibility)
* feat: new ``debug`` option to see the commands executed (-x) by this action
* feat: this action is now scanned for vulnerabilities by Snyk
* feat; this action is now scanned by CodeQL for Q/A
* feat: this action now performs CI tasks such as Validation, Linting and Unit Tests
* fix: various shell syntax for robustness
* fix: use printf and redirect output to non-stdout instead of echo in sensitive code locations
* refactor: use $HOME instead of tilde ~ for robustness
* feat: cross-platform support
* chore: Deprecate 7.0.2
* chore: EOL 7.0.0 & 7.0.1
2025-12-06 16:57:20 +01:00
Steven
92961b5880
feat: always force-upgrade alpine openssl
...
Force upgrade the alpines openssl to 3.5.4-r0 in order to tackle CVE-2025-9230 (low)
CVE-2025-9231 (low)
CVE-2025-9232 (low)
See:
https://github.com/Burnett01/rsync-deployments/security/code-scanning/7
https://github.com/Burnett01/rsync-deployments/security/code-scanning/8
https://github.com/Burnett01/rsync-deployments/security/code-scanning/9
2025-10-07 19:04:58 +02:00
Steven
33214bd98b
Release/7.1.0 ( #72 )
...
* upgrade to alpine from 3.19 to 3.22.1
Use drinternet/rsync 1.5.1 with alpine 3.22.1
https://hub.docker.com/layers/drinternet/rsync/v1.5.1/images/sha256-e61f4047577b566872764fa39299092adeab691efb3884248dbd6495dc926527
* upgrade to alpine from 3.19 to 3.22.1
Use drinternet/rsync 1.5.1 with alpine 3.22.1
https://hub.docker.com/layers/drinternet/rsync/v1.5.1/images/sha256-e61f4047577b566872764fa39299092adeab691efb3884248dbd6495dc926527
* Alpine 3.22.1
* Update SECURITY.md
* Alpine 3.22.1
* Update LICENSE
2025-08-29 20:57:37 +02:00
Steven Agyekum
76404482ea
always force-upgrade rsync to get the latest security upgrades
2025-01-19 15:19:29 +01:00
Matthias Pohl
b16614048b
Use SHA instead of Docker version tag for base image to allow for consistent code execution.
2024-03-28 17:53:03 +01:00
Steven Agyekum
ee287eb1f0
feat: Update base image to latest 1.4.4 (apline 3.19.1)
2024-03-06 11:58:08 +01:00
dependabot[bot]
b2007e683f
Bump drinternet/rsync from v1.4.2 to v1.4.3
...
Bumps drinternet/rsync from v1.4.2 to v1.4.3.
---
updated-dependencies:
- dependency-name: drinternet/rsync
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 02:56:43 +00:00
dependabot[bot]
4b36c0937b
Bump drinternet/rsync from v1.4.1 to v1.4.2
...
Bumps drinternet/rsync from v1.4.1 to v1.4.2.
---
updated-dependencies:
- dependency-name: drinternet/rsync
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-09-01 02:03:49 +00:00
dependabot[bot]
de20664c6e
Bump drinternet/rsync from v1.4.0 to v1.4.1
...
Bumps drinternet/rsync from v1.4.0 to v1.4.1.
---
updated-dependencies:
- dependency-name: drinternet/rsync
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 02:08:20 +00:00
dependabot[bot]
4afbe87441
Bump drinternet/rsync from v1.3.0 to v1.4.0 ( #22 )
...
Bumps drinternet/rsync from v1.3.0 to v1.4.0.
---
updated-dependencies:
- dependency-name: drinternet/rsync
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-01 19:07:48 +01:00
Steven Agyekum
b943ffe476
Release/v5.1 ( #15 )
...
* update base image drinternet/rsync:v1.3.0
* Base Image updates: alpine 3.14.1 latest
* use v5.1 in examples
* support for v5.x
* mention Alpine version
2021-08-12 18:45:01 +02:00
Steven Agyekum
342e70b07e
Release/v5 ( #13 )
...
* Reference JoshPiper/rsync-docker @ 1.1.0
* See: https://github.com/JoshPiper/rsync-docker/tree/1.1.0
* New features: Support passphrase protected keys
* supply SSH_PASS (key passphrase) to agent-add
Read more about the behavior: https://github.com/JoshPiper/rsync-docker#agent-askpass
* add new remote_key_pass config option
* Update README.md
* Update README.md
* 2.0 is EOL
* support 5.0, drop 2.0
* default to empty string
* reference JoshPiper/rsync-docker @ v1.2.0
2021-08-02 21:57:01 +02:00
JoshPiper
c6d9be15a7
Update Dockerfile
2020-01-05 11:03:17 +00:00
Steven Agyekum
6fa9b56771
Update Dockerfile
2019-12-27 16:14:47 +01:00
Steven Agyekum
20b1f5b4b8
Update Dockerfile
2019-12-27 16:11:54 +01:00
Steven Agyekum
1bbe8382e5
Update Dockerfile
2019-12-27 16:08:00 +01:00
Steven Agyekum
24cfa35ecb
remove docker labeling
2019-12-04 18:26:19 +01:00
Steven Agyekum
ab6e32151b
Update Dockerfile
2019-11-22 00:31:36 +01:00
Steven Agyekum
84e60e763c
change base image
2019-11-16 20:00:57 +01:00
Contention
65ac047ad6
Updated refs in Dockerfile to current url.
...
Fixes #1
2019-05-13 14:37:48 +01:00
Barry Bell
f8860c9bce
Initial code commit
2019-02-09 13:17:45 +00:00
