idaptik/.github/workflows/mirror.yml at 5de49620de68a923e449fe3b3e482bd5e0381f17 · hyperpolymath/idaptik · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
# SPDX-License-Identifier: PMPL-1.0-or-later
# SPDX-FileCopyrightText: 2025-2026 Joshua B. Jewell and Jonathan D.A. Jewell
name: Mirror to Git Forges

on:
  push:
    branches: [main]
  workflow_dispatch:

permissions: read-all

jobs:
  mirror-gitlab:
    runs-on: ubuntu-latest
    if: vars.GITLAB_MIRROR_ENABLED == 'true'
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
        with:
          fetch-depth: 0

      - uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
        with:
          ssh-private-key: ${{ secrets.GITLAB_SSH_KEY }}

      - name: Mirror to GitLab
        run: |
          ssh-keyscan -t ed25519 gitlab.com >> ~/.ssh/known_hosts
          git remote add gitlab git@gitlab.com:hyperpolymath/${{ github.event.repository.name }}.git || true
          git push --force gitlab main

  mirror-bitbucket:
    runs-on: ubuntu-latest
    if: vars.BITBUCKET_MIRROR_ENABLED == 'true'
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
        with:
          fetch-depth: 0

      - uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
        with:
          ssh-private-key: ${{ secrets.BITBUCKET_SSH_KEY }}

      - name: Mirror to Bitbucket
        run: |
          ssh-keyscan -t ed25519 bitbucket.org >> ~/.ssh/known_hosts
          git remote add bitbucket git@bitbucket.org:hyperpolymath/${{ github.event.repository.name }}.git || true
          git push --force bitbucket main

  mirror-codeberg:
    runs-on: ubuntu-latest
    if: vars.CODEBERG_MIRROR_ENABLED == 'true'
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
        with:
          fetch-depth: 0

      - uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
        with:
          ssh-private-key: ${{ secrets.CODEBERG_SSH_KEY }}

      - name: Mirror to Codeberg
        run: |
          ssh-keyscan -t ed25519 codeberg.org >> ~/.ssh/known_hosts
          git remote add codeberg git@codeberg.org:hyperpolymath/${{ github.event.repository.name }}.git || true
          git push --force codeberg main

  mirror-sourcehut:
    runs-on: ubuntu-latest
    if: vars.SOURCEHUT_MIRROR_ENABLED == 'true'
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
        with:
          fetch-depth: 0

      - uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
        with:
          ssh-private-key: ${{ secrets.SOURCEHUT_SSH_KEY }}

      - name: Mirror to SourceHut
        run: |
          ssh-keyscan -t ed25519 git.sr.ht >> ~/.ssh/known_hosts
          git remote add sourcehut git@git.sr.ht:~hyperpolymath/${{ github.event.repository.name }} || true
          git push --force sourcehut main

  mirror-disroot:
    runs-on: ubuntu-latest
    if: vars.DISROOT_MIRROR_ENABLED == 'true'
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
        with:
          fetch-depth: 0

      - uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
        with:
          ssh-private-key: ${{ secrets.DISROOT_SSH_KEY }}

      - name: Mirror to Disroot
        run: |
          ssh-keyscan -t ed25519 git.disroot.org >> ~/.ssh/known_hosts
          git remote add disroot git@git.disroot.org:hyperpolymath/${{ github.event.repository.name }}.git || true
          git push --force disroot main

  mirror-gitea:
    runs-on: ubuntu-latest
    if: vars.GITEA_MIRROR_ENABLED == 'true'
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
        with:
          fetch-depth: 0

      - uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
        with:
          ssh-private-key: ${{ secrets.GITEA_SSH_KEY }}

      - name: Mirror to Gitea
        run: |
          ssh-keyscan -t ed25519 ${{ vars.GITEA_HOST }} >> ~/.ssh/known_hosts
          git remote add gitea git@${{ vars.GITEA_HOST }}:hyperpolymath/${{ github.event.repository.name }}.git || true
          git push --force gitea main

  mirror-radicle:
    runs-on: ubuntu-latest
    if: vars.RADICLE_MIRROR_ENABLED == 'true'
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
        with:
          fetch-depth: 0

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable
        with:
          toolchain: stable

      - name: Install Radicle
        run: |
          # Install via cargo (safer than curl|sh)
          cargo install radicle-cli --locked
          echo "$HOME/.cargo/bin" >> $GITHUB_PATH

      - name: Mirror to Radicle
        run: |
          echo "${{ secrets.RADICLE_KEY }}" > ~/.radicle/keys/radicle
          chmod 600 ~/.radicle/keys/radicle
          rad sync --announce || echo "Radicle sync attempted"