github.com/octo-sts/app
A GitHub App that acts like a Security Token Service (STS) for the Github API
View on Github
Activity
- Latest release
- 1w ago
- Total releases
- 19
- Cadence
- ~9 days
- Last 12 months
- 8
Reach
- Stars
- 400
Details
- First release
- May 10, 2024
| Version | Released | |
|---|---|---|
v0.9.0
minor
|
v0.9.0
minor
Dependencies (41)
+ 33 more |
|
v0.8.0
minor
|
v0.8.0
minor
Dependencies (25)
+ 17 more |
|
v0.7.2
patch
|
v0.7.2
patch
Dependencies (25)
+ 17 more |
|
v0.7.1
patch
|
v0.7.1
patch
Dependencies (25)
+ 17 more |
|
v0.7.0
minor
|
v0.7.0
minor
Dependencies (25)
+ 17 more |
|
v0.6.1
patch
|
v0.6.1
patch
Dependencies (24)
+ 16 more |
|
v0.6.0
minor
|
v0.6.0
minor
Dependencies (24)
+ 16 more |
|
v0.5.4
patch
|
v0.5.4
patch
Dependencies (24)
+ 16 more |
|
v0.5.3
patch
|
v0.5.3
patch
Dependencies (23)
+ 15 more |
|
v0.5.2
patch
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.5.2
patch
Dependencies (22)
+ 14 more |
|
v0.5.1
patch
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.5.1
patch
Dependencies (22)
+ 14 more |
|
v0.5.0
minor
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.5.0
minor
Dependencies (22)
+ 14 more |
|
v0.4.2
patch
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.4.2
patch
Dependencies (21)
+ 13 more |
|
v0.4.1
patch
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.4.1
patch
Dependencies (21)
+ 13 more |
|
v0.4.0
minor
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.4.0
minor
Dependencies (21)
+ 13 more |
|
v0.3.1
patch
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.3.1
patch
Dependencies (21)
+ 13 more |
|
v0.3.0
minor
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.3.0
minor
Dependencies (21)
+ 13 more |
|
v0.2.0
minor
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.2.0
minor
Dependencies (16)
+ 8 more |
|
v0.1.0
initial
1 CVE
CVE-2025-52477
GO-2025-3779
GHSA-h3qp-hwvr-9xcq
Jul 28, 2025
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app Fixed in
0.5.3
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.1.0
initial
Dependencies (16)
+ 8 more |