diff --git a/.forgejo/workflows/debian.yml b/.forgejo/workflows/debian.yml
index 3a7bc68..0a0ed7e 100644
--- a/.forgejo/workflows/debian.yml
+++ b/.forgejo/workflows/debian.yml
@@ -40,7 +40,26 @@ jobs:
       - name: Create Deb package
         run: |
           dpkg-deb --build PKG_SOURCE timetracker_${{github.ref_name}}.deb
-
+      - name: Create Release
+        id: create_release
+        uses: actions/create-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.test }}
+        with:
+          tag_name: ${{ github.ref }}
+          release_name: Release ${{ github.ref }}
+          draft: false
+          prerelease: false
+      - name: Upload Release Asset
+        id: upload-release-asset 
+        uses: actions/upload-release-asset@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.test }}
+        with:
+          upload_url: ${{ steps.create_release.outputs.upload_url }} # This pulls from the CREATE RELEASE step above, referencing it's ID to get its outputs object, which include a `upload_url`. See this blog post for more info: https://jasonet.co/posts/new-features-of-github-actions/#passing-data-to-future-steps 
+          asset_path: timetracker_${{github.ref_name}}.deb
+          asset_name: timetracker_${{github.ref_name}}.deb
+          asset_content_type: application/zip
       - name: Upload Artifact (für CI-Artefakt)
         uses: actions/upload-artifact@v3
         with:
diff --git a/.forgejo/workflows/openbao.yml b/.forgejo/workflows/openbao.yml
new file mode 100644
index 0000000..a74d4e4
--- /dev/null
+++ b/.forgejo/workflows/openbao.yml
@@ -0,0 +1,23 @@
+name: openbao
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Read Openbao secrets
+        id: read-openbao-secrets
+        uses: hashicorp/vault-action@v2
+        with:
+          url: https://vault-test.mms-at-work.de:8200
+          token: ${{ secrets.VAULT_TEST_TOKEN }}
+          secrets: |
+            testproject/test/testproject foo | FOO
+      - name: Echo secret value from Openbao
+        run: echo "$FOO"
\ No newline at end of file