Add attended Policy Nexus source bootstrap
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a058f3-8ba0-7692-a042-9a870fc3d663
This commit is contained in:
codex 2026-08-31 23:24:05 +02:00
parent f342f9605e
commit 1b85a3ef3d
4 changed files with 470 additions and 0 deletions

View file

@ -79,6 +79,7 @@ access_frontdoor:
resolvable: false
delivery:
surface: forgejo-actions-secret
bootstrap_command: warden access openbao-platform-admin-login --exec -- scripts/openbao-bootstrap-policy-nexus-source.sh
target: Repository Actions secret FORGEJO_SOURCE_TOKEN on coulomb/policy-nexus.
Delivery is attended and must not expose the value in command output, process
arguments, Git, State Hub, or workflow logs.