Actually use the token

.gitea/workflows/jwt-testing.yaml

@@ -0,0 +1,25 @@
+name: JWT Testing
+run-name: JWT Testing
+on:
+  push:
+    branches:
+      - jwt-testing
+
+jobs:
+  jwt-testingh:
+    runs-on: ubuntu-latest
+    steps:
+      # https://github.com/marketplace/actions/generate-oidc-jwt
+      - name: Import Secrets
+        id: import-secrets
+        uses: hashicorp/vault-action@v2
+        with:
+          url: http://vault.avril
+          method: kubernetes
+          role: act-runner-helm-charts
+          secrets: |
+            github/token?org_name=${{ gitea.repository_owner }} token | GITHUB_TOKEN ;
+
+      - name: print
+        run: |
+          echo $GITHUB_TOKEN | base64 | base64

.gitea/workflows/mirror.yaml

@@ -1,6 +1,9 @@
 name: Mirror to GitHub
 run-name: Mirror to GitHub
-on: [push]
+on:
+  push:
+    branches:
+      - main
 
 jobs:
   build-and-push:

.gitea/workflows/publish.yaml

@@ -1,6 +1,9 @@
 name: Gitea Actions Demo
 run-name: ${{ gitea.actor }} is testing out Gitea Actions! 🚀
-on: [push]
+on:
+  push:
+    branches:
+      - main
 
 jobs:
   build-and-push: