Hey, quickly wanted to flag some suggested updates to your documentation for the GitHub OIDC integration to use immutable subject claims. Github recently updated the requirement for immutable subject claims going from something like repooctocat/my reporef:refs/heads/main -> repo:octocat@123456/my-repo@456789refrefs/heads/main github.blog/changelog/2026-04-23-immutable-subject-claims-for-github-actions-oidc-tokens This is currently being enforced for new repos past July 15th and optional for existing repos. Both documentation articles on infisical.com/docs/…/github and infisical.com/docs/integrations/cicd/githubactions still mention only the mutable subject which fails on newer repos. I ran into this when trying to setup CI for a new repo with Infisical secrets used in Actions but ran into 403 errors due to the denied claims. Not a big deal but thought I'd point it out! PS: Just onboarded to Infisical recently to use your Secrets Management and love the product. Easy to get started and use. Great work!

Thanks @laurin.book for flagging this! Will get these updated.

Brilliant, thanks Jake!