Lutz Finsterle 37a97cb0f4 Add OpenBAO-backed git credential helper for gitea pushes ...

Store the gitea PAT in OpenBAO KV (secret/gitea/push) and fetch it via a
git credential helper instead of keeping it in ~/.git-credentials:

- scripts/git-credential-openbao.sh: helper that reads the cred from the
  OpenBAO API using a scoped, read-only periodic token
- scripts/store-gitea-cred.sh: one-time hidden-input store of the PAT
- README: usage + rotation notes

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-28 14:37:39 +02:00

1.1 KiB

Executable File

Raw Blame History

View Raw