feat: Host openbao-fetch and document full-URL consumption #5

Merged

ahmad merged 1 commit from feat-openbao-fetch into main

2026-08-12 21:33:08 +00:00

ahmad commented

2026-08-12 17:04:15 +00:00

Owner

Issue

Closes #4

Problem

Launchpad's pipeline proved cross-repo actions broken twice over: bare references resolve against data.forgejo.org, and the runner clones actions anonymously, so openbao-fetch living in the private infrastructure repository can never be consumed by another repo.

Solution

openbao-fetch moves here unchanged (the move infrastructure-vps #111 anticipated), and the README documents the two consumption rules — full URL, pinned tag — with input tables for both actions. After merge, v2 tags the first release covering both.

Review notes

The action file is a byte-for-byte copy of infrastructure-vps/.forgejo/actions/openbao-fetch/action.yml. Retiring that copy is left to a follow-up issue in that repo. This repository being public is what makes anonymous clones work; it holds no secrets by design.

Risks and trade-offs

Two copies of openbao-fetch exist until the infrastructure-vps one is retired.

### Issue Closes #4 ### Problem Launchpad's pipeline proved cross-repo actions broken twice over: bare references resolve against data.forgejo.org, and the runner clones actions anonymously, so openbao-fetch living in the private infrastructure repository can never be consumed by another repo. ### Solution openbao-fetch moves here unchanged (the move infrastructure-vps #111 anticipated), and the README documents the two consumption rules — full URL, pinned tag — with input tables for both actions. After merge, v2 tags the first release covering both. ### Review notes The action file is a byte-for-byte copy of infrastructure-vps/.forgejo/actions/openbao-fetch/action.yml. Retiring that copy is left to a follow-up issue in that repo. This repository being public is what makes anonymous clones work; it holds no secrets by design. ### Risks and trade-offs Two copies of openbao-fetch exist until the infrastructure-vps one is retired.

ahmad added 1 commit

2026-08-12 17:04:15 +00:00

feat: Host openbao-fetch and document full-URL consumption ec5d68b662

The action moves here unchanged from infrastructure-vps, whose
introduction anticipated exactly this: a private repository's actions
cannot be consumed cross-repo because the runner clones them
anonymously. Bare owner/repo references also resolve against the
default actions mirror rather than this server, so the README now
mandates the full-URL pinned-tag form for every consumer.

ahmad merged commit 329b9be189 into main

2026-08-12 21:33:08 +00:00

ahmad deleted branch feat-openbao-fetch

2026-08-12 21:33:08 +00:00

ahmad referenced this pull request from a commit

2026-08-12 21:33:10 +00:00

feat: Host openbao-fetch and document full-URL consumption (#5)