curl -X PUT 'https://api.github.com/repos/example-owner/example-repo/actions/oidc/customization/sub' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "use_default": true
}'

# PUT /repos/{owner}/{repo}/actions/oidc/customization/sub (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub token; required.
Request formats: application/json.
Last verified: 2026-10-20

> Set the customization template for an OIDC subject claim for a repository

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X PUT 'https://api.github.com/repos/example-owner/example-repo/actions/oidc/customization/sub' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "use_default": true
}'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| owner | path | string | Yes | The account owner of the repository. The name is not case sensitive. |
| repo | path | string | Yes | The name of the repository without the `.git` extension. The name is not case... |
| use_default | body | boolean | Yes | Whether to use the default template or not. If `true`, the `include_claim_key... |
| include_claim_keys | body | string[] | No | Array of unique strings. Each claim key can only contain alphanumeric charact... |
| use_immutable_subject | body | boolean | No | Whether to opt in to the immutable OIDC subject claim format for this reposit... |

## Response example
{}

---
Need an API key? Get one at https://github.com/settings/tokens

PUT

PUT /repos/{owner}/{repo}/actions/oidc/customization/sub — GitHub API

GitHub token (required); https://api.github.com

GitHub API

Set the customization template for an OIDC subject claim for a repository

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-10-20 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 314 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X PUT 'https://api.github.com/repos/example-owner/example-repo/actions/oidc/customization/sub' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10' \  -H 'Content-Type: application/json' \  -d '{  "use_default": true}'

Parameters

Name	In	Type	Required	Description
owner	path	string	Yes	The account owner of the repository. The name is not case sensitive.
repo	path	string	Yes	The name of the repository without the `.git` extension. The name is not case sensitive.
use_default	body	boolean	Yes	Whether to use the default template or not. If `true`, the `include_claim_keys` field is ignored.
include_claim_keys	body	string[]	No	Array of unique strings. Each claim key can only contain alphanumeric characters and underscores.
use_immutable_subject	body	boolean	No	Whether to opt in to the immutable OIDC subject claim format for this repository. When `true`, OIDC tokens will use a stable, repository-ID-based `sub` claim.

Response 200 OK

{}

Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.