Merge branch 'security-fix' of github.com:codefresh-io/cf-git-cloner into security-fix

Author: denis-codefresh

.ssh/config

@@ -1 +1 @@
-IdentityFile ~/.ssh/codefresh
+IdentityFile ~/.ssh/codefresh

Dockerfile

@@ -11,9 +11,13 @@ RUN apk add --no-cache --virtual deps openssl && \
     git lfs install && \
     apk del deps
 
-#add ssh record on which ssh key to use
+# add ssh record on which ssh key to use
 COPY ./.ssh/ /root/.ssh/
 
+# add fingerprint for major git providers
+RUN ssh-keyscan github.com >> /root/.ssh/known_hosts
+RUN ssh-keyscan bitbucket.org >> /root/.ssh/known_hosts
+
 COPY ./start.sh /run/start.sh
 RUN chmod +x /run/start.sh
 

Dockerfile.aarch64

@@ -9,9 +9,13 @@ RUN apk add --no-cache --virtual deps openssl && \
     git lfs install && \
     apk del deps
 
-#add ssh record on which ssh key to use
+# add ssh record on which ssh key to use
 COPY ./.ssh/ /root/.ssh/
 
+# add fingerprint for major git providers
+RUN ssh-keyscan github.com >> /root/.ssh/known_hosts
+RUN ssh-keyscan bitbucket.org >> /root/.ssh/known_hosts
+
 COPY ./start.sh /run/start.sh
 RUN chmod +x /run/start.sh