honour SSH_PORT env for pinning the host port when set (fall back to random allocation otherwise).\r\n- .github/workflows/reusable-qemu-test.yaml: install cinc-auditor and pin SSH_PORT=22222 when inputs.test == ssh-hardening.\r\n- .github/workflows/image-pr.yaml: add ssh-hardening to the core-tests matrix.\r\n\r\n\u003c!-- please add an icon to the title of this PR (see https://github.com/kairos-io/kairos/blob/master/CONTRIBUTING.md#step-5-push-your-feature-branch-to-your-fork), and delete this line and similar ones --\u003e\r\n\r\n**What this PR does / why we need it**:\r\n\r\n**Which issue(s) this PR fixes** *(optional, in `fixes #\u003cissue number\u003e(, fixes #\u003cissue_number\u003e, ...)` format, will close the issue(s) when PR gets merged)*:\r\nFixes #\r\n","changed_files":4,"closed_at":null,"comments":0,"comments_url":"https://api.github.com/repos/kairos-io/kairos/issues/4306/comments","commits":1,"commits_url":"https://api.github.com/repos/kairos-io/kairos/pulls/4306/commits","created_at":"2026-08-12T14:38:20Z","deletions":2,"diff_url":"https://github.com/kairos-io/kairos/pull/4306.diff","draft":true,"head":{"label":"kairos-io:feat/ssh-hardening-ci","ref":"feat/ssh-hardening-ci","repo":{"allow_auto_merge":true,"allow_forking":true,"allow_merge_commit":true,"allow_rebase_merge":true,"allow_squash_merge":true,"allow_update_branch":true,"archive_url":"https://api.github.com/repos/kairos-io/kairos/{archive_format}{/ref}","archived":false,"assignees_url":"https://api.github.com/repos/kairos-io/kairos/assignees{/user}","blobs_url":"https://api.github.com/repos/kairos-io/kairos/git/blobs{/sha}","branches_url":"https://api.github.com/repos/kairos-io/kairos/branches{/branch}","clone_url":"https://github.com/kairos-io/kairos.git","collaborators_url":"https://api.github.com/repos/kairos-io/kairos/collaborators{/collaborator}","comments_url":"https://api.github.com/repos/kairos-io/kairos/comments{/number}","commits_url":"https://api.github.com/repos/kairos-io/kairos/commits{/sha}","compare_url":"https://api.github.com/repos/kairos-io/kairos/compare/{base}...{head}","contents_url":"https://api.github.com/repos/kairos-io/kairos/contents/{+path}","contributors_url":"https://api.github.com/repos/kairos-io/kairos/contributors","created_at":"2021-07-30T16:24:54Z","default_branch":"master","delete_branch_on_merge":true,"deployments_url":"https://api.github.com/repos/kairos-io/kairos/deployments","description":"The immutable Linux meta-distribution for edge Kubernetes.","disabled":false,"downloads_url":"https://api.github.com/repos/kairos-io/kairos/downloads","events_url":"https://api.github.com/repos/kairos-io/kairos/events","fork":false,"forks":136,"forks_count":136,"forks_url":"https://api.github.com/repos/kairos-io/kairos/forks","full_name":"kairos-io/kairos","git_commits_url":"https://api.github.com/repos/kairos-io/kairos/git/commits{/sha}","git_refs_url":"https://api.github.com/repos/kairos-io/kairos/git/refs{/sha}","git_tags_url":"https://api.github.com/repos/kairos-io/kairos/git/tags{/sha}","git_url":"git://github.com/kairos-io/kairos.git","has_discussions":true,"has_downloads":false,"has_issues":true,"has_pages":false,"has_projects":true,"has_pull_requests":true,"has_wiki":true,"homepage":"https://kairos.io","hooks_url":"https://api.github.com/repos/kairos-io/kairos/hooks","html_url":"https://github.com/kairos-io/kairos","id":391127422,"is_template":false,"issue_comment_url":"https://api.github.com/repos/kairos-io/kairos/issues/comments{/number}","issue_events_url":"https://api.github.com/repos/kairos-io/kairos/issues/events{/number}","issues_url":"https://api.github.com/repos/kairos-io/kairos/issues{/number}","keys_url":"https://api.github.com/repos/kairos-io/kairos/keys{/key_id}","labels_url":"https://api.github.com/repos/kairos-io/kairos/labels{/name}","language":"Go","languages_url":"https://api.github.com/repos/kairos-io/kairos/languages","license":{"key":"apache-2.0","name":"Apache License 2.0","node_id":"MDc6TGljZW5zZTI=","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0"},"merge_commit_mes