diff --git a/.gitea/actions/infisical-secrets/action.yaml b/.gitea/actions/infisical-secrets/action.yaml
new file mode 100644
index 0000000..0a6086e
--- /dev/null
+++ b/.gitea/actions/infisical-secrets/action.yaml
@@ -0,0 +1,14 @@
+name: 'Pull Infisical Secrets'
+description: 'Pulls secrets from local Infisical instance and injects them into the job'
+
+runs:
+  using: "composite"
+  steps:
+    - name: Fetch secrets from Infisical
+      uses: Infisical/secrets-action@v1.0.8
+      with:
+        domain: "http://infisical.local.chromart.cc"
+        client-id: "9cb72bd7-6e48-4297-a8b3-1d616ea58452"
+        client-secret: "f431d8b6e18e51a858b695afdc30464c618a166ce507b1f55e512e830ebafcf8"
+        env-slug: "prod"
+        project-slug: "chromart-g-do-u"