octo-sts is a GitHub App that functions as a Security Token Service (STS) for GitHub API access. It allows workloads running anywhere that can produce OIDC tokens to exchange them for short-lived GitHub credentials, eliminating the need for Personal Access Tokens.