Octo STS

Octo STS is an open source GitHub App, developed by Chainguard, that acts as a security token service for the GitHub API. It exchanges OIDC tokens from your workloads for short-lived GitHub tokens, so your automation doesn’t need long-lived personal access tokens (PATs).

To learn why PATs are risky and how Octo STS replaces them, read Octo STS: Short-lived GitHub tokens without PATs in Supply Chain Security 101. To install and configure it, follow Set up and use Octo STS.