0.27.0 — Infisical hardening: runtime refresh, audit logging, CLI verify/audit, startup verification, SSH host key verification, interface consolidation

internal/actuator/ssh.go

@@ -157,7 +157,7 @@ func ExecuteProcedure(
 	clientCfg := &ssh.ClientConfig{
 		User:            cfg.User,
 		Auth:            []ssh.AuthMethod{ssh.PublicKeys(signer)},
-		HostKeyCallback: ssh.InsecureIgnoreHostKey(), // restricted key; host trust via inventory
+		HostKeyCallback: HostKeyCallback(),
 		Timeout:         cfg.Timeout,
 	}