From d86a259693a1a77dfcf200132b3e501811c012be Mon Sep 17 00:00:00 2001
From: peptiderepo <admin@peptiderepo.com>
Date: Tue, 7 Apr 2026 12:46:45 +0700
Subject: [PATCH] fix: add ssh-keyscan for GitHub host key verification

---
 .github/workflows/deploy.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index c623141..1f60643 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -84,6 +84,10 @@ jobs:
           key: ${{ secrets.SSH_PRIVATE_KEY }}
           port: ${{ secrets.SSH_PORT }}
           script: |
+            # Ensure GitHub host key is trusted (one-time setup).
+            mkdir -p ~/.ssh
+            ssh-keyscan github.com >> ~/.ssh/known_hosts 2>/dev/null
+
             PLUGIN_DIR="$HOME/domains/peptiderepo.com/public_html/wp-content/plugins/peptide-news-plugin"
             REPO_URL="git@github.com:peptiderepo/peptide-news-plugin.git"