GitHub - octo-sts/app: A GitHub App that acts like a Security Token Service (STS) for the Github API

This repository holds a GitHub App called octo-sts that acts like a Security Token Service (STS) for the GitHub API. Using this App, workloads running essentially anywhere that can produce OIDC tokens can federate with this App's STS API in order to produce short-lived tokens for interacting with GitHub. The ultimate goal of this App is to wholly eliminate the need for GitHub Personal Access Token

[efcl]

OIDCを使ってSecurity Token Service (STS)を扱うGitHub Apps。 GitHub Actionsから特定のパーミッションを持つ寿命の短いtokenをToken Federationで取得できる。 権限ごとのGitHub AppsやPATを作らないで、それをポリシーファイルで管理できる