Skip to content

Conversation

@georg
Copy link
Contributor

@georg georg commented Sep 22, 2025

Ignore adding github.com keys to known_hosts.

Win32-OpenSSH does not support the key exchange method [email protected].

This method was recently added to github.com - see https://github.blog/engineering/platform-security/post-quantum-security-for-ssh-access-on-github/

For more information about the KEX method support see PowerShell/Win32-OpenSSH#2140

Thanks to Levi in go-git Discord for the continue-on-error tip.

Copilot AI review requested due to automatic review settings September 22, 2025 09:46
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR fixes a build issue on Windows by adding error tolerance to the SSH known hosts configuration step. The problem occurs because Win32-OpenSSH doesn't support the new post-quantum key exchange method ([email protected]) recently added to GitHub's SSH configuration.

  • Adds continue-on-error: true to the "Configure known hosts" step to prevent build failures on Windows
  • Allows the workflow to proceed even if the SSH key configuration fails on non-Ubuntu platforms

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.


- name: Configure known hosts
continue-on-error: true
if: matrix.platform != 'ubuntu-latest'
Copy link

Copilot AI Sep 22, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider making the error handling more specific to Windows instead of all non-Ubuntu platforms. The issue described affects Win32-OpenSSH specifically, so using if: matrix.platform == 'windows-latest' would be more precise and allow other non-Ubuntu platforms to fail appropriately if they encounter genuine SSH configuration issues.

Suggested change
if: matrix.platform != 'ubuntu-latest'
if: matrix.platform == 'windows-latest'

Copilot uses AI. Check for mistakes.
@georg georg force-pushed the fix-ssh-keyscan-windows branch 2 times, most recently from 6cb4f41 to 8db9fd9 Compare September 22, 2025 09:59
Ignore adding github.com keys to known_hosts.

Win32-OpenSSH does not support the key exchange method
[email protected].

This method was recently added to github.com - see
https://github.blog/engineering/platform-security/post-quantum-security-for-ssh-access-on-github/

For more information about the KEX method support see
PowerShell/Win32-OpenSSH#2140
@georg georg force-pushed the fix-ssh-keyscan-windows branch from 8db9fd9 to 65d6418 Compare September 22, 2025 10:04
Copy link
Member

@pjbgf pjbgf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@georg thanks for fixing the build. 🙇

@pjbgf pjbgf merged commit 23ffe67 into go-git:main Sep 22, 2025
16 checks passed
@georg georg deleted the fix-ssh-keyscan-windows branch September 22, 2025 10:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants