datadog/Datadog STS
This action exchanges the workflow's identity token for Datadog credentials according to a target trust policy.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 3, 2026
- License
- Apache 2.0
Pinned Snippet
uses: datadog/dd-sts-action@639d841c72f15e4e77747bd726ef8105ce971da2 # v1.0.5tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| domain | The domain of the Datadog STS instance to use to federate. | — | webhooks.build.datadoghq.com |
| policy | The name of the trust policy to use. | yes | — |
| audience | The audience value for the OIDC token. Must match the audience configured in your dd-sts policy. Defaults to `dd-sts` (the default audience for policies) | — | dd-sts |
| retries | The number of attempts to make when a request fails with a retryable error. | — | 5 |
Outputs
| name | description |
|---|---|
| api_key | A Datadog API key. |
| app_key | A Datadog application key. |
| app_key_expiration_timestamp | The expiration timestamp of the application key. |