Skip to content

[TASK] Use StrictHostKeyChecking=accept-new for ci ssh connection

Tilo Baller requested to merge (removed):tbal-main-patch-84887 into main

Increase security for defaults a little by using accept-new instead of no for StrictHostKeyChecking.

Inspired by: https://github.com/ddev/ddev/pull/5104

The accept-new is implemented in OpenSSH since version 7.6 (Release 10/2017, see Changelog).

More information/discussions: https://news.ycombinator.com/item?id=29896287

Merge request reports