From a79c3ca05fa39e4e9743f98ddd0d1691d06fe9ff Mon Sep 17 00:00:00 2001
From: Sina Alikhani <s.alikhani@ittalie.com>
Date: Wed, 15 Jul 2026 16:59:46 +0330
Subject: [PATCH] Fix git pull SSH in pipeline (host keys + known_hosts)

---
 .woodpecker.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.woodpecker.yml b/.woodpecker.yml
index 26f38a9..48ca2a5 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -12,6 +12,7 @@ skip_clone: true
 variables:
   - &host_workspace /data/1-deploy/gitea/yara724/api
   - &workspace_volume /data/1-deploy/gitea/yara724/api:/workspace
+  - &host_ssh /home/talieh/.ssh:/root/.ssh:ro
   - &pipeline_env
     WORKSPACE: *host_workspace
     PROJECT_NAME: Yara724 API
@@ -28,10 +29,13 @@ steps:
     image: docker.arvancloud.ir/alpine/git:latest
     environment:
       <<: *pipeline_env
+      GIT_SSH_COMMAND: ssh -o UserKnownHostsFile=/tmp/known_hosts -o StrictHostKeyChecking=yes
     volumes:
       - *workspace_volume
+      - *host_ssh
     commands:
       - git config --global --add safe.directory /workspace
+      - mkdir -p /tmp && ssh-keyscan -H git.ittalie.com >> /tmp/known_hosts
       - cd /workspace
       - git pull origin main
       - date +%s > /workspace/.wp-deploy-start