diff --git a/.forgejo/workflows/openbao.yml b/.forgejo/workflows/openbao.yml
new file mode 100644
index 0000000..a74d4e4
--- /dev/null
+++ b/.forgejo/workflows/openbao.yml
@@ -0,0 +1,23 @@
+name: openbao
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Read Openbao secrets
+        id: read-openbao-secrets
+        uses: hashicorp/vault-action@v2
+        with:
+          url: https://vault-test.mms-at-work.de:8200
+          token: ${{ secrets.VAULT_TEST_TOKEN }}
+          secrets: |
+            testproject/test/testproject foo | FOO
+      - name: Echo secret value from Openbao
+        run: echo "$FOO"
\ No newline at end of file