Skip to content
This repository was archived by the owner on Sep 17, 2026. It is now read-only.

chore: update GitHub STS action - #41

Merged
sds merged 1 commit into
mainfrom
codex/update-github-sts-action-8819cf80
Aug 31, 2026
Merged

sds merged 1 commit into
mainfrom
codex/update-github-sts-action-8819cf80

Conversation

@sds

@sds sds commented Aug 31, 2026

Copy link
Copy Markdown
Member

Summary

  • Pin the GitHub STS action to 8819cf80bdcb39c36c34700e3f2ecc08bde54f23.
  • Route post-job token revocation through STS so GitHub and the D1 ownership ledger are updated together.
  • Retain the action’s direct GitHub revocation fallback and ledger reconciliation.

Previous action revisions revoked tokens directly at GitHub, leaving their STS rows marked active until expiration. This pin includes tempoxyz/gh-actions#73 and the paired tempoxyz/github-sts#39 service behavior.

Validation

  • actionlint on the changed workflows
  • git diff --check

@sds
sds merged commit 0b90e87 into main Aug 31, 2026
3 checks passed
@sds
sds deleted the codex/update-github-sts-action-8819cf80 branch August 31, 2026 05:24
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant