From b26f2851b70082efd5a2ec57bbe8577197b79333 Mon Sep 17 00:00:00 2001 From: Joseph Klix Date: Fri, 28 Aug 2026 09:50:15 -0700 Subject: [PATCH] mention renamed repos use the new immutable identifiers --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 13fe50a..7867109 100644 --- a/README.md +++ b/README.md @@ -600,8 +600,9 @@ claims ([1][gh-blog-oidc], [2][sub-claim-custom]). #### Immutable subject claims -Repositories created on github.com on or after 15 July 2026, and older -repositories that have opted in, emit an [immutable `sub` claim][immutable-sub]. +Repositories created on github.com on or after 15 July 2026, older +repositories that have opted in, and older repositories that have been renamed +since 15 July 2026, emit an [immutable `sub` claim][immutable-sub]. This claim appends the permanent numeric ID of the organization and of the repository after each name, separated by `@`, so that a recycled org or repository name cannot be used to mint tokens matching a stale trust policy.