Github Actions 权限被拒绝 (publickey)

Question

我卡在尝试启动Github actions工作流程的过程中。 Flutter项目有一个自定义包的依赖项。我在Github存储库中拥有这个自定义包。这是我在pubspec.yaml中设置此依赖项的方式：

xxxx_package:
git:
  url: [e-mail]:USER_NAME/xxxx_package.git
  ref: develop

如果我运行flutter pub get命令，它会成功结束，我可以毫无问题地构建和执行应用程序。

但是，当我向 Github 发送推送并启动工作流程时，该过程以以下错误结束：

Running "flutter pub get" in Project-Flutter...            
Git error. Command: `git clone --mirror [e-mail]:xxx/xxxx_package.git /home/runner/.pub-cache/git/cache/xxxx_package-123456789`
stdout: 
stderr: Cloning into bare repository '/home/runner/.pub-cache/git/cache/xxxx_package-123456789'...
[e-mail]: Permission denied (publickey).
fatal: Could not read from remote repository.

这是我的操作工作流文件：

name: Check merge

on:
  push:
    branches: [ main, develop ]

  pull_request:
    branches: [main, develop]
    

  workflow_dispatch:

jobs:
  build:
    name: flutter environment
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses: actions/setup-java@v2
        with:
          distribution: 'zulu'
          java-version: '11'
      - uses: subosito/flutter-action@v2
        with:
          flutter-version: '2.8.1'
      - name: Install dependencies
        run: flutter pub get
      - run: flutter format --set-exit-if-changed .
      - run: flutter analyze .
      - run: flutter test

我已经配置了自定义软件包仓库，使其与ssh协议一起工作。 更新02/17/2022 我尝试了@GuiFalourd的建议，但不起作用。

我已经向两个仓库（主项目和私有仓库）添加了两个密钥（对于两个仓库都相同）。

- KNOWN_HOSTS - SSH_PRIVATE_KEY -> 这是内容 -----BEGIN RSA PRIVATE KEY----- ssh-ed25519 "SSH_KEY" -----END RSA PRIVATE KEY-----

但是这是输出：

IO  : Finished git. Exit code 128.
| Nothing output on stdout.
| stderr:
| | Cloning into bare repository '/home/runner/.pub-cache/git/cache/xxxx_package-363daa26604baf2e3bfeae08af7d9c7050760631'...
| | Warning: Permanently added the ECDSA host key for IP address 'x.x.x.x' to the list of known hosts.
| | Load key "/home/runner/.ssh/id_rsa": invalid format
| | [e-mail]: Permission denied (publickey).
| | fatal: Could not read from remote repository.
| | 
| | Please make sure you have the correct access rights
| | and the repository exists.

- Sami Issa

---

那个 package 仓库是私有的吗？ - ASAD HAMEED

这个参考资料可能会有用：https://stackoverflow.com/questions/62557325/flutter-running-flutter-pub-get-in-github-actions-with-private-dependencies - GuiFalourd

@ASADHAMEED 是的，这是一个私有存储库。 - Sami Issa

我正在尝试你建议的解决方案@GuiFalourd。 我会尽快告诉你。 - Sami Issa

@GuiFalourd，我在尝试了你的建议后更新了我的问题。 - Sami Issa

@SamiIssa 看看这个， https://dev59.com/_FQJ5IYBdhLWcg3wHR88#54565418 - ASAD HAMEED

Answer 1

好的，我已经找到了问题。@GuiFalourd给了我正确的方向。 问题出在秘密值上（在github仓库页面上，进入设置 -> 秘密 -> actions -> 新存储库密码）：

• SSH_PRIVATE_KEY：一开始，我使用命令pbcopy < ~/.ssh/id_rsa.pub来获取ssh公钥。这是错误的。这个密码需要ssh私钥。正确的命令是pbcopy < ~/.ssh/id_rsa
• KNOWN_HOSTS：在启动ssh-keyscan github.com命令之后，重要的是要复制属于github.com ssh-rsa [KEY]的行。

注意：这些密码必须存在于所有应用程序依赖包存储库中。

下面是工作流yaml文件的最终版本：

name: 检查合并

on:
  push:
    branches: [ master, develop ]
    paths:
      - "**.dart"

  pull_request:
    branches: [master, develop]
    paths:
      - "**.dart"

  workflow_dispatch:

jobs:
  build:
    name: flutter environment
    runs-on: ubuntu-latest
    steps:
      - uses: shimataro/ssh-key-action@v2
        with:
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          name: id_rsa
          known_hosts: ${{ secrets.KNOWN_HOSTS }}
      - uses: actions/checkout@v2
      - uses: actions/setup-java@v2
        with:
          distribution: 'zulu'
          java-version: '11'
      - uses: subosito/flutter-action@v2
        with:
          flutter-version: '2.8.1'
      - name: Install dependencies
        run: flutter pub get
      - run: flutter test

- Sami Issa

---

谢谢！那个SSH设置是我重新使用Swift Packages时让我的Github Action再次运行的全部所需。 - laka