pin ubuntu version in daily-collect

.forgejo/workflows/daily-collect.yaml

@@ -4,47 +4,32 @@ on:
     - cron: '0 1 * * *'
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   update-feed:
     runs-on: ubuntu-latest
     container:
-      image: ubuntu:latest
+      image: ubuntu:22.04
     steps:
-
     - name: Install Dependencies
       run: |
-        # Ensure we have the necessary tools to install packages
+        apt-get update -y && apt-get install -y \
-        apt-get update -y && apt-get install openssh-client -y
+          openssh-client \
+          git \
+          curl \
+          ca-certificates
 
     - name: Setup SSH
       env:
         SSH_PRIVATE_KEY: ${{ secrets.TOKEN_NAME }}
       run: |
-        # Debug: Check if SSH_PRIVATE_KEY is set
-        if [ -z "$SSH_PRIVATE_KEY" ]; then
-          echo "Error: SSH_PRIVATE_KEY is not set"
-          exit 1
-        fi
-
-        # Prepare SSH directory
         mkdir -p ~/.ssh
         chmod 700 ~/.ssh
-
-        # Write SSH key, with additional error checking
         echo "$SSH_PRIVATE_KEY" | tr -d '\r' > ~/.ssh/id_rsa
         chmod 600 ~/.ssh/id_rsa
-
-        # Verify key file
-        if [ ! -f ~/.ssh/id_rsa ]; then
-          echo "Error: Failed to create SSH private key file"
-          exit 1
-        fi
-
-        # Add host key
         ssh-keyscan git.mcdevitt.tech >> ~/.ssh/known_hosts
-        
-        # Test SSH connection
-        ssh -vT git@git.mcdevitt.tech || true
 
     - name: Checkout repository
       run: |
@@ -52,22 +37,24 @@ jobs:
         git clone git@git.mcdevitt.tech:bpmcdevitt/github_poc_collector.git .
 
     - name: Setup Rust
-      run: |
+      uses: actions-rs/toolchain@v1
-        curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
+      with:
-        source "$HOME/.cargo/env"
+        toolchain: stable
-        rustup default stable
+        override: true
-        rustc --version
-        cargo --version
 
     - name: Cache Cargo dependencies
-      run: |
+      uses: actions/cache@v3
-        mkdir -p ~/.cargo/registry
+      with:
-        mkdir -p ~/.cargo/git
+        path: |
-        mkdir -p target
+          ~/.cargo/registry
+          ~/.cargo/git
+          target
+        key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+        restore-keys: |
+          ${{ runner.os }}-cargo-
 
     - name: Run recent feed update
       run: |
-        source "$HOME/.cargo/env"
         cargo run -- --feed recent
 
     - name: Commit and push results