From a0a7a70c14c7cce1477ccf88982a6506e8141420 Mon Sep 17 00:00:00 2001
From: shinalok <shinalok357@gmail.com>
Date: Fri, 7 Aug 2026 22:32:57 +0900
Subject: [PATCH] update CI/CD workflow: decode base64 SSH key and validate key
 integrity

---
 .gitea/workflows/ci-cd.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/ci-cd.yml b/.gitea/workflows/ci-cd.yml
index 4027ea8..bbc19bf 100644
--- a/.gitea/workflows/ci-cd.yml
+++ b/.gitea/workflows/ci-cd.yml
@@ -47,9 +47,11 @@ jobs:
       - name: SSH 키 준비
         run: |
           mkdir -p ~/.ssh
-          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/id_ed25519
+          echo "${{ secrets.DEPLOY_SSH_KEY }}" | base64 -d > ~/.ssh/id_ed25519
           chmod 600 ~/.ssh/id_ed25519
           ssh-keyscan -p ${{ vars.DEPLOY_SSH_PORT }} ${{ vars.DEPLOY_SSH_HOST }} >> ~/.ssh/known_hosts
+          # 키가 깨진 채로 저장됐다면 여기서 바로 에러가 나서 원인을 알 수 있음
+          ssh-keygen -y -f ~/.ssh/id_ed25519 > /dev/null
 
       - name: 소스 동기화
         run: |