I noticed a message in one of my pipelines that a host key was added to known_hosts during a run of atlassian/ssh-run. A subsequent step with rsync failed on the changed host key.
The script pipe.sh appears to do a lot of work to setup KNOWN_SERVERS_FILE, but then always invokes ssh with -o 'StrictHostKeyChecking=no'.
Is that intentional? Testing with an additional -o 'StrictHostKeyChecking=yes' on openssh's ssh shows that the second value won't override the first one.