"topic": "risks" · 1 guide
Risks
Ways federated trust goes wrong after it is set up.
- job/oidc-subject-recycling category Risks
Subject recycling: when a deleted GitHub name still unlocks your cloud role
Trust rules that match names can be satisfied by whoever registers that name next. What the 2026 research found, what GitHub, GitLab and the clouds changed, and how to audit your own roles.
· 7 min
Have a policy to test? Use the OIDC trust checker.