{"id":94487,"date":"2026-03-12T07:53:28","date_gmt":"2026-03-12T14:53:28","guid":{"rendered":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties"},"modified":"2026-03-12T12:13:45","modified_gmt":"2026-03-12T19:13:45","slug":"actions-oidc-tokens-now-support-repository-custom-properties","status":"publish","type":[3521],"link":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties","title":{"rendered":"Actions OIDC tokens now support repository custom properties"},"content":{"rendered":"<!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body><p>GitHub Actions OpenID Connect (OIDC) tokens now support repository custom properties as claims. Additionally, a new settings page is available in public preview, making it easy to configure OIDC token claims directly from your repository, organization, or enterprise settings while adding properties to the claim.<\/p>\n<p>Organization and enterprise admins can select custom properties to include in OIDC tokens. Once a property is added to the claim, every repository with that property value set will automatically include it in its OIDC tokens, prefixed with <code>repo_property_<\/code>. You can use these claims to build attribute-based access control (ABAC) policies in Azure, AWS, GCP, and other cloud providers without modifying individual workflows.<\/p>\n<p>With custom properties in OIDC tokens, you can:<\/p>\n<ul>\n<li><strong>Eliminate duplication<\/strong>: Your governance metadata lives in one place and flows automatically into your cloud policies.<\/li>\n<li><strong>Reduce configuration drift<\/strong>: Policies bind directly to repository attributes, so they stay accurate as your organization evolves.<\/li>\n<li><strong>Accelerate onboarding<\/strong>: New repositories automatically inherit the right access policies based on their properties.<\/li>\n<li><strong>Create consistent cross-cloud policies<\/strong>: Turn your existing GitHub metadata into an actionable control surface for managed identities across AWS, Azure, GCP, and beyond.<\/li>\n<\/ul>\n<h3 id=\"what-you-can-do-today\" id=\"what-you-can-do-today\" ><a class=\"heading-link\" href=\"#what-you-can-do-today\">What you can do today<span class=\"heading-hash pl-2 text-italic text-bold\" aria-hidden=\"true\"><\/span><\/a><\/h3>\n<ul>\n<li>Add repository custom properties to the OIDC token via the API or the new settings UI.<\/li>\n<li>Use custom properties in the subject claim for flexible policy targeting.<\/li>\n<li>View and manage OIDC token claim configuration from a new UI at the repository, organization, and enterprise level.<\/li>\n<\/ul>\n<p>You can then reference this claim in your cloud provider&rsquo;s trust policy to control access based on repository attributes. No static allow lists or per-repository workflow changes required.<\/p>\n<p>To learn more, see <a href=\"https:\/\/docs.github.com\/actions\/security-for-github-actions\/security-hardening-your-deployments\/about-security-hardening-with-openid-connect#customizing-the-token-claims\">Customizing the OIDC token<\/a>.<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"<p>GitHub Actions OpenID Connect (OIDC) tokens now support repository custom properties as claims. Additionally, a new settings page is available in public preview, making it easy to configure OIDC token&hellip;<\/p>\n","protected":false},"author":2106,"featured_media":94488,"template":"","meta":{"_gh_post_show_toc":"","_gh_post_is_no_robots":"","_gh_post_is_featured":"","_gh_post_is_excluded":"","_gh_post_is_unlisted":"","_gh_post_related_link_1":"","_gh_post_related_link_2":"","_gh_post_related_link_3":"","_gh_post_sq_img":"","_gh_post_sq_img_id":"","_gh_post_cta_title":"","_gh_post_cta_text":"","_gh_post_cta_link":"","_gh_post_cta_button":"","_gh_post_recirc_hide":"","_gh_post_recirc_col_1":"","_gh_post_recirc_col_2":"","_gh_post_recirc_col_3":"","_gh_post_recirc_col_4":"","_featured_video":"","_gh_post_additional_query_params":"","footnotes":"","_links_to":"","_links_to_target":"","primary_cta":"","primary_cta_url":"","secondary_cta":"","secondary_cta_url":""},"label":[1836],"group":[3810],"coauthors":[3100],"class_list":["post-94487","changelog","type-changelog","status-publish","has-post-thumbnail","hentry","changelog-type-new-releases","changelog-label-actions","changelog-group-03-2026"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Actions OIDC tokens now support repository custom properties - GitHub Changelog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Actions OIDC tokens now support repository custom properties \u00b7 GitHub Changelog\" \/>\n<meta property=\"og:description\" content=\"GitHub Actions OpenID Connect (OIDC) tokens now support repository custom properties as claims. Additionally, a new settings page is available in public preview, making it easy to configure OIDC token&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-12T19:13:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2026\/03\/560454710-3cfae492-acf8-4c3b-813f-cf6bd05c0856.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1260\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Allison\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\\\/\",\"name\":\"Actions OIDC tokens now support repository custom properties - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/559482404-b7b301c2-ce8f-4ca8-9fac-6747cb449876.jpeg?fit=2400%2C1260\",\"datePublished\":\"2026-03-12T14:53:28+00:00\",\"dateModified\":\"2026-03-12T19:13:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\\\/#primaryimage\",\"url\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/559482404-b7b301c2-ce8f-4ca8-9fac-6747cb449876.jpeg?fit=2400%2C1260\",\"contentUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/559482404-b7b301c2-ce8f-4ca8-9fac-6747cb449876.jpeg?fit=2400%2C1260\",\"width\":2400,\"height\":1260,\"caption\":\"GitHub OIDC Configuration preview showing subject claim customization with a template using repo, context, ref, plus options to save and manage custom property claims.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Changelogs\",\"item\":\"https:\\\/\\\/github.blog\\\/changelog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Actions OIDC tokens now support repository custom properties\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Actions OIDC tokens now support repository custom properties - GitHub Changelog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/","og_locale":"en_US","og_type":"article","og_title":"Actions OIDC tokens now support repository custom properties \u00b7 GitHub Changelog","og_description":"GitHub Actions OpenID Connect (OIDC) tokens now support repository custom properties as claims. Additionally, a new settings page is available in public preview, making it easy to configure OIDC token&hellip;","og_url":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/","og_site_name":"The GitHub Blog","article_modified_time":"2026-03-12T19:13:45+00:00","og_image":[{"width":2400,"height":1260,"url":"https:\/\/github.blog\/wp-content\/uploads\/2026\/03\/560454710-3cfae492-acf8-4c3b-813f-cf6bd05c0856.jpeg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"Allison"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/","url":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/","name":"Actions OIDC tokens now support repository custom properties - The GitHub Blog","isPartOf":{"@id":"https:\/\/github.blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/#primaryimage"},"image":{"@id":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2026\/03\/559482404-b7b301c2-ce8f-4ca8-9fac-6747cb449876.jpeg?fit=2400%2C1260","datePublished":"2026-03-12T14:53:28+00:00","dateModified":"2026-03-12T19:13:45+00:00","breadcrumb":{"@id":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/#primaryimage","url":"https:\/\/github.blog\/wp-content\/uploads\/2026\/03\/559482404-b7b301c2-ce8f-4ca8-9fac-6747cb449876.jpeg?fit=2400%2C1260","contentUrl":"https:\/\/github.blog\/wp-content\/uploads\/2026\/03\/559482404-b7b301c2-ce8f-4ca8-9fac-6747cb449876.jpeg?fit=2400%2C1260","width":2400,"height":1260,"caption":"GitHub OIDC Configuration preview showing subject claim customization with a template using repo, context, ref, plus options to save and manage custom property claims."},{"@type":"BreadcrumbList","@id":"https:\/\/github.blog\/changelog\/2026-03-12-actions-oidc-tokens-now-support-repository-custom-properties\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Changelogs","item":"https:\/\/github.blog\/changelog\/"},{"@type":"ListItem","position":3,"name":"Actions OIDC tokens now support repository custom properties"}]},{"@type":"WebSite","@id":"https:\/\/github.blog\/#website","url":"https:\/\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/94487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs"}],"about":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/types\/changelog"}],"author":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/users\/2106"}],"version-history":[{"count":1,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/94487\/revisions"}],"predecessor-version":[{"id":94497,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/94487\/revisions\/94497"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media\/94488"}],"wp:attachment":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media?parent=94487"}],"wp:term":[{"taxonomy":"changelog-type","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/type?post=94487"},{"taxonomy":"changelog-label","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/label?post=94487"},{"taxonomy":"changelog-group","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/group?post=94487"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/coauthors?post=94487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}