fix: change SFTP host key verification default to secure (False)

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-02-10 15:39:23 +00:00
parent 04c44e6bad
commit 9a89f70cf4
4 changed files with 16 additions and 14 deletions
+3 -3
View File
@@ -107,9 +107,9 @@ class Settings(BaseSettings):
sftp_folder: Optional[str] = None
sftp_private_key: Optional[str] = None
sftp_private_key_passphrase: Optional[str] = None
# Security: Disable host key verification only in development/testing environments
# In production, set to True and configure known_hosts file
sftp_disable_host_key_verification: bool = True # Default allows connection without known_hosts
# Security: Host key verification is enabled by default for security
# In development/testing, set to True to disable verification (not recommended)
sftp_disable_host_key_verification: bool = False # Default enforces host key verification
# Email settings
email_host: Optional[str] = None