Add SSH SFTP backend support

internal/app/run_test.go

@@ -11,6 +11,7 @@ import (
 	"time"
 
 	"gitea.maximumdirect.net/eric/distributor/internal/bundle"
+	"gitea.maximumdirect.net/eric/distributor/internal/config"
 	"gitea.maximumdirect.net/eric/distributor/internal/notify"
 	"gitea.maximumdirect.net/eric/distributor/internal/state"
 	"gitea.maximumdirect.net/eric/distributor/internal/storage"
@@ -46,6 +47,34 @@ func TestRunDryRunPrintsConfigSummary(t *testing.T) {
 	}
 }
 
+func TestWriteSSHWarningsReportsInsecureHostKeyPolicy(t *testing.T) {
+	var stdout bytes.Buffer
+	err := writeSSHWarnings(&stdout, config.Pipeline{
+		ID: "reports",
+		Source: config.Backend{
+			Backend: config.BackendSSH,
+			SSH:     config.SSH{HostKeyPolicy: config.HostKeyPolicyOff},
+		},
+		Destinations: []config.Destination{{
+			ID:      "archive",
+			Backend: config.BackendSSH,
+			SSH:     config.SSH{HostKeyPolicy: config.HostKeyPolicyOff},
+		}},
+	})
+	if err != nil {
+		t.Fatalf("writeSSHWarnings() error = %v", err)
+	}
+	output := stdout.String()
+	for _, want := range []string{
+		"pipeline=reports source host_key_policy=off disables SSH host key checking",
+		"pipeline=reports destination=archive host_key_policy=off disables SSH host key checking",
+	} {
+		if !strings.Contains(output, want) {
+			t.Fatalf("output = %q, want substring %q", output, want)
+		}
+	}
+}
+
 func TestRunPublishesNewLocalBundle(t *testing.T) {
 	sourceRoot := t.TempDir()
 	destinationRoot := t.TempDir()