affected-keys-checks VS Rundeck

If you think you may be impacted, use one of these options to scan your hosts for the exposed keys, delete any you find, and replace them with a new SSH key pair. You can find more information about the issue and resources for remediation here.

I don't use it myself, but I think rundeck might be what you're looking for

Have a look at rundeck.org

Not possible at this moment, please suggest that here.

Hi, that's an odd issue (never happened on my env, but reported here), you can try this or this.

If you want a web panel, I believe you could achieve that with Rundeck.

I found this info here and here.

Changing default SCM SSH authentication to SSHJ: The SCM integration now uses SSHJ for SSH authentication by default (previously JSCH). GitHub has tightened up their SSH key requirements and now requires SSH-RSA 2 keys. The new default for ssh-keygen via OpenSSH is not supported by JSCH.

Firstly, I tried Rundeck and Apache Airflow. They are complete overkill for what I want to do. Then I found Cronicle which is light enough, besides it can pull double duty as a general purpose scheduler.

Yesterday we posted a Security Advisory to Github for a critical vulnerability in Rundeck Community and Rundeck Enterprise Docker images, versions 4.0 and earlier. Those Docker images contained a pre-generated SSH key pair in the default file path. If that key was used to configure SSH access to hosts, they would allow access to anyone with the exposed private key.