Actions OIDC tokens now support repository custom properties - GitHub Changelog
… You can then reference this claim in your cloud provider’s trust policy to control access based on repository attributes. No static allow lists or per-repository workflow changes required. …