It would be great if there was a way to establish inbound trusts from other OIDC-enabled services like GitHub. That would make it much more reliable to authenticate from GitHub Actions to trigger pipelines in CircleCi with the Github-identity user.