Enhance SSH command options for improved security by adding BatchMode and disabling PasswordAuthentication

Author: akash-manna-sky

src/main/java/org/jenkinsci/plugins/gitclient/CliGitAPIImpl.java

@@ -2725,7 +2725,8 @@ Path createWindowsGitSSH(Path key, String user, Path knownHosts) throws IOExcept
             w.write("setlocal enabledelayedexpansion");
             w.newLine();
             w.write("\"" + sshexe.getAbsolutePath()
-                    + "\" -i \"!JENKINS_GIT_SSH_KEYFILE!\" -l \"!JENKINS_GIT_SSH_USERNAME!\" "
+                    + "\" -T -i \"!JENKINS_GIT_SSH_KEYFILE!\" -l \"!JENKINS_GIT_SSH_USERNAME!\" "
+                    + "-o BatchMode=yes -o PasswordAuthentication=no "
                     + getHostKeyFactory().forCliGit(listener).getVerifyHostKeyOption(knownHosts) + " %* ");
             w.newLine();
         }
@@ -2748,7 +2749,8 @@ Path createUnixGitSSH(Path key, String user, Path knownHosts) throws IOException
             w.newLine();
             w.write("fi");
             w.newLine();
-            w.write("ssh -i \"$JENKINS_GIT_SSH_KEYFILE\" -l \"$JENKINS_GIT_SSH_USERNAME\" "
+            w.write("ssh -T -i \"$JENKINS_GIT_SSH_KEYFILE\" -l \"$JENKINS_GIT_SSH_USERNAME\" "
+                    + "-o BatchMode=yes -o PasswordAuthentication=no "
                     + getHostKeyFactory().forCliGit(listener).getVerifyHostKeyOption(knownHosts) + " \"$@\"");
             w.newLine();
         }