Accept the SSH private key base64-encoded #2

Merged
megamiley merged 1 commits from fix/base64-private-key into main 2026-09-28 14:16:20 +02:00
1 Commits
Author SHA1 Message Date
megamileyandClaude Opus 5.5 4b9b56ff8d Accept the SSH private key base64-encoded
Multi-line secrets aren't masked by the runner, so a raw PEM key passed
as ssh-key can end up in plain text in the step's env block in the log.
Accept a single-line base64-encoded key instead, which is masked like
any other secret. Raw PEM keys still work for backwards compatibility.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-28 14:15:44 +02:00