# Running Renovate as a GitHub Action (and NO PAT!)

DevFeed: [Running Renovate as a GitHub Action (and NO PAT!)](<https://devfeed.tech/articles/running-renovate-as-a-github-action-and-no-pat-13214.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/running-renovate-as-a-github-action>)

Published: 2026-01-19T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [renovate](<https://devfeed.tech/topics/renovate.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [octo sts](<https://devfeed.tech/topics/octo-sts.md>), [github personal access token](<https://devfeed.tech/topics/github-personal-access-token.md>), [Security](<https://devfeed.tech/topics/security.md>), [maintenance](<https://devfeed.tech/topics/maintenance.md>)

Tags: [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [dependabot](<https://devfeed.tech/tags/dependabot.md>), [dependencies](<https://devfeed.tech/tags/dependencies.md>), [github](<https://devfeed.tech/tags/github.md>), [github-action](<https://devfeed.tech/tags/github-action.md>), [github-pat-alternative](<https://devfeed.tech/tags/github-pat-alternative.md>), [guide](<https://devfeed.tech/tags/guide.md>), [maintenance](<https://devfeed.tech/tags/maintenance.md>), [octo-sts](<https://devfeed.tech/tags/octo-sts.md>), [personal-access-token](<https://devfeed.tech/tags/personal-access-token.md>), [renovate](<https://devfeed.tech/tags/renovate.md>), [run](<https://devfeed.tech/tags/run.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>)

## AI overview

This tutorial explains how to run Renovate as a scheduled GitHub Action to update repository dependencies without using a long-lived GitHub Personal Access Token. It presents Octo STS as the replacement for the PAT and outlines the workflow setup.

## Source excerpt

Discover how you can run Renovate as a GitHub Action without needing a GitHub Personal Access Token by using Octo STS.