feat: Switch mirror workflow to SSH

Author: hyperpolymath

.github/workflows/mirror.yml

@@ -23,12 +23,21 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Setup SSH
+        uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.GITLAB_SSH_KEY }}
+
+      - name: Add GitLab to known hosts
+        run: |
+          mkdir -p ~/.ssh
+          ssh-keyscan -t ed25519 gitlab.com >> ~/.ssh/known_hosts
+
       - name: Push to GitLab
         env:
-          GITLAB_TOKEN: ${{ secrets.GITLAB_TOKEN }}
           REPO_NAME: ${{ github.event.repository.name }}
         run: |
-          git remote add gitlab https://oauth2:${GITLAB_TOKEN}@gitlab.com/hyperpolymath/${REPO_NAME}.git || true
+          git remote add gitlab git@gitlab.com:hyperpolymath/${REPO_NAME}.git || true
           git push gitlab HEAD:main --force || git push gitlab HEAD:master --force
           git push gitlab --tags --force
 
@@ -44,11 +53,20 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Setup SSH
+        uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.BITBUCKET_SSH_KEY }}
+
+      - name: Add Bitbucket to known hosts
+        run: |
+          mkdir -p ~/.ssh
+          ssh-keyscan -t ed25519 bitbucket.org >> ~/.ssh/known_hosts
+
       - name: Push to Bitbucket
         env:
-          BITBUCKET_TOKEN: ${{ secrets.BITBUCKET_TOKEN }}
           REPO_NAME: ${{ github.event.repository.name }}
         run: |
-          git remote add bitbucket https://x-token-auth:${BITBUCKET_TOKEN}@bitbucket.org/hyperpolymath/${REPO_NAME}.git || true
+          git remote add bitbucket git@bitbucket.org:hyperpolymath/${REPO_NAME}.git || true
           git push bitbucket HEAD:main --force || git push bitbucket HEAD:master --force
           git push bitbucket --tags --force