From e14d23c6bf28582fef981c845437661983e1e4aa Mon Sep 17 00:00:00 2001
From: Lorenzo Natali <lorenzo.natali@geosolutionsgroup.com>
Date: Wed, 22 Jul 2026 11:11:44 +0200
Subject: [PATCH] Fix release deploy: add ssh-keyscan for known_hosts

Release workflow deployed via wagon-ssh (JSch) but never populated
~/.ssh/known_hosts, so the SFTP host key was rejected. Mirror the
step already present in CI.yml.
---
 .github/workflows/release.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2208100..1a3273e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -64,7 +64,10 @@ jobs:
         server-password: MAVEN_PASSWORD
 
     - name: Publish package
-      run: mvn clean install deploy
+      run: |
+        mkdir -p ~/.ssh
+        ssh-keyscan -H maven.geo-solutions.it >> ~/.ssh/known_hosts
+        mvn clean install deploy
       env:
         MAVEN_USERNAME: ${{ secrets.GS_MAVEN_USERNAME }}
         MAVEN_PASSWORD: ${{ secrets.GS_MAVEN_PASSWORD }}