example-octo-sts

Example of Octo STS

• https://www.chainguard.dev/unchained/the-end-of-github-pats-you-cant-leak-what-you-dont-have
• https://github.com/apps/octo-sts

How to try Octo STS

1. Create a repository using this template repository
2. Install the GitHub App Octo STS to the forked repository
3. Fix scope and subject and create a pull request

bash fix.sh <new repo full name>

e.g.

bash fix.sh szksh-lab/example-octo-sts

CI would fail because the trust policy of the base branch isn't fixed yet, but please ignore the failure and merge the pull request.

4. Create a pull request again, then the GitHub Actions Workflow is run and a GitHub Access token is issued by octo-sts/action

The following screenshot is a comment posted using a GitHub access token issued by octo-sts/action.

LICENSE

MIT