inforge turns declarative YAML resource definitions into real cloud deployments using Pulumi and GitHub Actions. It enforces an opinionated multi-region, multi-provider infrastructure model with built-in runtime secret delivery for services.
📖 Full documentation: wardnet.github.io/inforge
# macOS (Apple Silicon) and Linux — installs to ~/.local/bin by default
curl -fsSL https://github.com/wardnet/inforge/releases/latest/download/install.sh | sh
inforge plugins installSet INFORGE_VERSION / INFORGE_INSTALL_DIR to pin a version or change the destination. Once
installed, inforge update upgrades the CLI in place. While a newer release exists, inforge
prints a one-line notice after each command (the version check itself runs at most once a day,
and never in CI or non-interactive runs).
See Installation for all platforms.
This repository builds two statically-linked, fully self-contained binaries:
| Binary | Purpose | Platforms |
|---|---|---|
inforge |
The CLI you invoke directly | linux amd64/arm64, darwin arm64 |
inforge-agent |
On-host runtime agent — the systemd ExecStart for every service; decrypts its host-key-encrypted secrets at start, drops privilege, execs the service | linux amd64/arm64 |
inforge-agent is downloaded onto each host by inforge deploy (pinned to the deploying inforge version) — you never invoke it directly. inforge builds no provider plugins of its own; inforge plugins install fetches the standard published Pulumi plugins a project needs.
inforge ships one action — it installs the CLI. You own your workflow and inject your providers' secrets as env vars:
- uses: wardnet/inforge@v6 # installs the latest inforge release
- run: inforge deploy prd --yesSee GitHub Actions: Overview for starter workflows and the bring-your-own-workflow model.