Closed ArtemSBulgakov closed 2 weeks ago
What's wrong with SSH script?
@evermake Microsoft knows too much about your server
What's wrong with SSH script?
It gives GitHub access to our servers. If something goes wrong (e.g. GitHub's security mechanisms allowed some modifications in workflows we use), our production servers may be compromised.
Instead of letting GitHub Actions to connect to SSH, we can set up webhooks (ex. https://github.com/adnanh/webhook) which will run a script to pull Docker images and run services.