debug file output

.forgejo/workflows/build.yaml

@@ -27,17 +27,18 @@ jobs:
         run: |
           mkdir -p $HOME/.ssh
           chmod 700 $HOME/.ssh
-      - name: Write ssh key
-        id: sshkey
-        uses: https://github.com/timheuer/base64-to-file@v1
-        with:
-          encodedString: "${{ secrets.SSH_USER }}"
-          fileName: id_ed25519
-          fileDir: $HOME/.ssh/
+      # - name: Write ssh key
+      #   id: sshkey
+      #   uses: https://github.com/timheuer/base64-to-file@v1
+      #   with:
+      #     encodedString: "${{ secrets.SSH_USER }}"
+      #     fileName: id_ed25519
+      #     fileDir: $HOME/.ssh/
       - name: Make id_ed25519 user only
         run: |
+          # output to null to avoid leaking the key
+          echo ${{ secrets.SSH_USER }} | base64 -d > $HOME/.ssh/id_ed25519 >/dev/null 2>&1
           ls -la $HOME/.ssh
-          echo ${{ steps.sshkey.outputs.filePath }}
           chmod 600 $HOME/.ssh/id_ed25519
       - uses: https://github.com/cachix/cachix-action@v15
         if: ${{ !github.event.pull_request.head.repo.fork }}

.gitignore

@@ -4,3 +4,4 @@ age.key
 result*
 .direnv
 .kube
+.github