From c16f89bdf4cd065448ea7bde8b96a1dad4c77e41 Mon Sep 17 00:00:00 2001 From: Joseph Klix Date: Fri, 28 Aug 2026 10:19:03 -0700 Subject: [PATCH] mention renamed repos use the new immutable identifiers (#1941) --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 13fe50a..7867109 100644 --- a/README.md +++ b/README.md @@ -600,8 +600,9 @@ claims ([1][gh-blog-oidc], [2][sub-claim-custom]). #### Immutable subject claims -Repositories created on github.com on or after 15 July 2026, and older -repositories that have opted in, emit an [immutable `sub` claim][immutable-sub]. +Repositories created on github.com on or after 15 July 2026, older +repositories that have opted in, and older repositories that have been renamed +since 15 July 2026, emit an [immutable `sub` claim][immutable-sub]. This claim appends the permanent numeric ID of the organization and of the repository after each name, separated by `@`, so that a recycled org or repository name cannot be used to mint tokens matching a stale trust policy.