OctoSTS

July 17, 2026

Version updated for https://github.com/launchdarkly/octosts-action to version v1.4.0.

This publisher is shown as ‘verified’ by GitHub.
This action is used across all versions by 1 repositories.

Action Type

This is a Node action using Node version 24.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

The GitHub Action described in the README facilitates the exchange of a workflow’s identity token for a GitHub token using an OctoSTS service. It automates the process of federating a GitHub repository with a trusted third-party, providing a secure and seamless authentication mechanism without the need to manually generate or manage tokens. This action simplifies the integration of external services into GitHub workflows by automatically managing access permissions based on configured trust policies.

What’s Changed

Work around bug in octokit by @BehnH in https://github.com/launchdarkly/octosts-action/pull/9
Bump undici from 7.20.0 to 7.24.0 by @dependabot[bot] in https://github.com/launchdarkly/octosts-action/pull/10
chore: [SEC-7924] pin third-party GitHub Actions to commit SHAs by @pkaeding in https://github.com/launchdarkly/octosts-action/pull/11
Update SECURITY.md to reflect bug bounty program by @kparkinson-ld in https://github.com/launchdarkly/octosts-action/pull/12
fix: remediate high & critical Dependabot and Wiz vulnerabilities by @pkaeding in https://github.com/launchdarkly/octosts-action/pull/13
Switch CODEOWNERS to team-cloud-engineering by @Jrc356 in https://github.com/launchdarkly/octosts-action/pull/16
Bump undici from 7.24.0 to 7.28.0 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/launchdarkly/octosts-action/pull/15
fix: Exclude the workflow’s own repo from configure-git auth by @BehnH in https://github.com/launchdarkly/octosts-action/pull/17
Fix publishing workflow for major tags by @BehnH in https://github.com/launchdarkly/octosts-action/pull/19

New Contributors

@dependabot[bot] made their first contribution in https://github.com/launchdarkly/octosts-action/pull/10
@pkaeding made their first contribution in https://github.com/launchdarkly/octosts-action/pull/11
@kparkinson-ld made their first contribution in https://github.com/launchdarkly/octosts-action/pull/12
@Jrc356 made their first contribution in https://github.com/launchdarkly/octosts-action/pull/16

Full Changelog: https://github.com/launchdarkly/octosts-action/compare/v1...v1.4.0