Octo STS a “Security Token Service” (STS) for GitHub credentials. Using this App, workloads running essentially anywhere that can produce OIDC tokens can federate with this App's STS API in order to produce short-lived tokens for interacting with GitHub.