---
id: w4/m3/t003
title: "Bootstrap client seeding: script + deploy.yml step + .env/gh-secrets"
worker: worker4
status: done
estimate: 30m
depends_on: [w4/m3/t001]
---

## Objective

scripts/auth-bootstrap-client.sh upserts the bex-bootstrap client (client_credentials, secret from BEX_BOOTSTRAP_CLIENT_SECRET, explicit env wins over .env); deploy.yml waits for hydra Ready then seeds; key added to .env/.env.example/.env.template/gh-secrets.sh and pushed to GH Actions.

## Files

- scripts/auth-bootstrap-client.sh
- .github/workflows/deploy.yml
- scripts/gh-secrets.sh
- .env.example
- .env.template
