chore(secrets): rotated forgejo #162

Closed
jfraeys wants to merge 1 commit from chore/rotate-forgejo-20261014-173427 into main
Owner

Vault change from rotating forgejo on 2026-10-14 (opened by scripts/secrets/vault-pr.py). Encrypted file only; no values appear here.

Keys rotated (names only): FORGEJO_RUNNER_REGISTRATION_TOKEN, FORGEJO_API_TOKEN, FORGEJO_METRICS_TOKEN

Manifest: rotated_at: 2026-10-14 for FORGEJO_RUNNER_REGISTRATION_TOKEN, FORGEJO_API_TOKEN, FORGEJO_METRICS_TOKEN.

Not deployed. Merging changes no running service and starts no staging run. After merging: git pull, then deploy as the rotation output says (secrets shared by two services go out together).

Vault change from rotating **forgejo** on 2026-10-14 (opened by `scripts/secrets/vault-pr.py`). Encrypted file only; no values appear here. **Keys rotated (names only):** FORGEJO_RUNNER_REGISTRATION_TOKEN, FORGEJO_API_TOKEN, FORGEJO_METRICS_TOKEN **Manifest:** `rotated_at: 2026-10-14` for FORGEJO_RUNNER_REGISTRATION_TOKEN, FORGEJO_API_TOKEN, FORGEJO_METRICS_TOKEN. **Not deployed.** Merging changes no running service and starts no staging run. After merging: `git pull`, then deploy as the rotation output says (secrets shared by two services go out together).
chore(secrets): rotated forgejo
All checks were successful
Secret scan / scan (pull_request) Successful in 16s
ebb23ca5d3
Keys rotated (names only): FORGEJO_RUNNER_REGISTRATION_TOKEN, FORGEJO_API_TOKEN, FORGEJO_METRICS_TOKEN.
Manifest rotated_at set to 2026-10-14 for: FORGEJO_RUNNER_REGISTRATION_TOKEN, FORGEJO_API_TOKEN, FORGEJO_METRICS_TOKEN.

Encrypted file only; no values here. Not deployed: merging changes no running service.
Author
Owner

Superseded by #168. This rotation ran with the pre-#163 script (it also rotated the unused FORGEJO_API_TOKEN and FORGEJO_RUNNER_REGISTRATION_TOKEN) and was never deployed; a later rotation (new FORGEJO_METRICS_TOKEN only) is what production runs, and #168 records exactly that vault. Closing without merging.

Superseded by #168. This rotation ran with the pre-#163 script (it also rotated the unused FORGEJO_API_TOKEN and FORGEJO_RUNNER_REGISTRATION_TOKEN) and was never deployed; a later rotation (new FORGEJO_METRICS_TOKEN only) is what production runs, and #168 records exactly that vault. Closing without merging.
jfraeys closed this pull request 2026-10-14 18:58:21 -04:00
All checks were successful
Secret scan / scan (pull_request) Successful in 16s

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
jfraeys/infra!162
No description provided.