Forgejo's security team received disclosure of this issue on September 4th. (source: I am a member of that team)

(Thanks for your work!)

A basic API to access Actions logs was added in Forgejo v16. `/api/v1/repos/{owner}/{repo}/actions/jobs/{job_id}/logs`

Nice! I was hoping they would add this in v16. Unfortunately I am still on v15 of all my instances of Forgejo

Thanks to you I’ve now upgraded to v16, and can confirm the logs API works beautifully!