fix(ci): rename the FORGEJO_ADMIN_TOKEN Forgejo secret to CI_FORGEJO_ADMIN_TOKEN #45

Merged

jfraeys merged 1 commit from jfraeys/feat/rotation-ci-sync into main 2026-10-10 11:14:31 -04:00

Conversation 0 Commits 1 Files changed 8 +13 -7

jfraeys commented 2026-10-10 11:14:11 -04:00

Owner

Copy link

Follow-up to #44 (merged just before this commit was pushed, so main still has the bad name).

Forgejo forbids secret names starting with FORGEJO_, GITEA_, GITHUB_ or a digit, so secrets.FORGEJO_ADMIN_TOKEN could never exist and always resolved empty in drift-check, terraform-plan/apply and staging-validate (PR-comment and status posts silently failed). The Forgejo secret is now CI_FORGEJO_ADMIN_TOKEN (the vault key keeps its name). The secret already exists in Forgejo (added by hand); scripts/sync-ci-secrets.py reports all five mapped secrets present.

sync-ci-secrets.py now validates names client-side against that rule before calling the API (tested: FORGEJO_X and 1BAD rejected, exit 1).

🤖 Generated with Claude Code

Follow-up to #44 (merged just before this commit was pushed, so main still has the bad name). Forgejo forbids secret names starting with FORGEJO_, GITEA_, GITHUB_ or a digit, so `secrets.FORGEJO_ADMIN_TOKEN` could never exist and always resolved empty in drift-check, terraform-plan/apply and staging-validate (PR-comment and status posts silently failed). The Forgejo secret is now `CI_FORGEJO_ADMIN_TOKEN` (the vault key keeps its name). The secret already exists in Forgejo (added by hand); `scripts/sync-ci-secrets.py` reports all five mapped secrets present. `sync-ci-secrets.py` now validates names client-side against that rule before calling the API (tested: FORGEJO_X and 1BAD rejected, exit 1). 🤖 Generated with [Claude Code](https://claude.com/claude-code)

jfraeys added 1 commit 2026-10-10 11:14:11 -04:00

fix(ci): rename the FORGEJO_ADMIN_TOKEN Forgejo secret to CI_FORGEJO_ADMIN_TOKEN ... e3b3952e18

Forgejo forbids secret names starting with FORGEJO_, GITEA_, GITHUB_ or a
digit, so secrets.FORGEJO_ADMIN_TOKEN could never exist and always resolved
empty in drift-check, terraform-plan/apply and staging-validate (PR-comment and
status posts were silently failing). The secret is now CI_FORGEJO_ADMIN_TOKEN
(vault key unchanged). sync-ci-secrets.py validates names client-side against
that rule before calling the API.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

jfraeys merged commit 2aefe56876 into main 2026-10-10 11:14:31 -04:00

jfraeys referenced this pull request from a commit 2026-10-10 11:14:32 -04:00

Merge pull request 'fix(ci): rename the FORGEJO_ADMIN_TOKEN Forgejo secret to CI_FORGEJO_ADMIN_TOKEN' (#45) from jfraeys/feat/rotation-ci-sync into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

jfraeys/infra!45

No description provided.