@lanodan @captainepoch @icedquinn if you're ci runner or action's ssh implementation supports it using a secret stored as the envvar SSH_PASSPHRASE should work. notably this works in gitlab. from a posture standpoint it makes more sense to have a dedicated ed25519 key just for ci/cd jobs with no passphrase. you're creating more complexity than security with the proposed setup.