External Secrets Integration for Gitea Actions

[Dinnerspy]

Feature Description

The proposed feature involves enhancing Gitea Actions with External Secrets Integration, allowing secure retrieval of secrets from external sources like HashiCorp Vault during CI/CD processes. This would include native support for interacting with HashiCorp Vault API to dynamically retrieve secrets. Additionally, the feature aims to streamline the configuration of secrets in CI/CD pipelines by introducing a straightforward mechanism within Gitea Actions workflow files, enabling users to specify the secrets required for each job.

Gitlab external secrets: https://docs.gitlab.com/ee/ci/secrets/

Screenshots

No response

[Alexsandr-Random]

I recently encountered this problem myself. I wrote a module for integration with Vault that works on the principle of a template.
If someone needs a simple and quick solution, take it:
https://github.com/Alexsandr-Random/gitea-vault-module

P.S. the script is reliable and passes shellcheck 100%

[Dinnerspy]

From what i can tell. Once this pr goes through #33945 it will be good to leverage gitea actions with the vault action via jwt.