inforge

inforge turns declarative YAML resource definitions into real cloud deployments using Pulumi and GitHub Actions. It enforces an opinionated multi-region, multi-provider infrastructure model with built-in runtime secret delivery for services.

📖 Full documentation: wardnet.github.io/inforge

Quick install

# macOS (Apple Silicon) and Linux — installs to ~/.local/bin by default
curl -fsSL https://github.com/wardnet/inforge/releases/latest/download/install.sh | sh

inforge plugins install

Set INFORGE_VERSION / INFORGE_INSTALL_DIR to pin a version or change the destination. Once installed, inforge update upgrades the CLI in place. While a newer release exists, inforge prints a one-line notice after each command (the version check itself runs at most once a day, and never in CI or non-interactive runs).

See Installation for all platforms.

Binaries

This repository builds four statically-linked, fully self-contained binaries:

Binary	Purpose	Platforms
inforge	The CLI you invoke directly	linux amd64/arm64, darwin arm64
inforge-bootstrap	Runtime secret bootstrapper — the systemd ExecStart for every service; fetches secrets at start, drops privilege, execs the service	linux amd64/arm64
pulumi-resource-neon	Pulumi provider plugin for Neon PostgreSQL	linux amd64/arm64
pulumi-resource-infisical	Pulumi provider plugin for Infisical secrets	linux amd64/arm64

The provider plugins are installed automatically by inforge plugins install, and inforge-bootstrap is downloaded onto each host by inforge deploy (pinned to the deploying inforge version) — you never invoke either directly.

In GitHub Actions

inforge ships one action — it installs the CLI. You own your workflow and inject your providers' secrets as env vars:

- uses: wardnet/inforge@v1
  with:
    version: v1.6.0   # pin the CLI; default is the latest release
- run: inforge deploy prd --yes

See GitHub Actions: Overview for starter workflows and the bring-your-own-workflow model.