casdoor's use ofssh.InsecureIgnoreHostKey() disables host key verification in github.com/casdoor/casdoor
ssh.InsecureIgnoreHostKey()