✨ Access private repositories without PAT

[jacobwoffenden]

Describe the feature request.

Users would like to access private repositories in GitHub Actions

Describe the context.

Currently the only way to do this is with PATs or fine grained tokens, but that introduces a secret to maintain

Value / Purpose

Implement an STS type system to remove PAT access from GitHub Actions

User Types

No response

[jacobwoffenden]

Solution here is to use Octo STS:

• Install app
• Create definition https://github.com/moj-analytical-services/octo-sts-2/blob/main/.github/chainguard/octo-sts-1.sts.yaml
• Use https://github.com/moj-analytical-services/octo-sts-1/actions/runs/10507333941