breakingremovedGitHub calls it: Retired
SHA-1 in HTTPS on GitHub sunset
- Announced
- Tags
- ecosystem-and-accessibility
- Severity
- breaking, set by
reef/github-rule-v1 - Source
- https://github.blog/changelog/2026-09-15-sha-1-in-https-on-github-sunset
Previously we announced we would be disabling SHA-1 in HTTPS for GitHub on September 15th, 2026.
Following the planned schedule, GitHub has disabled SHA-1 in HTTPS for github.com and partner CDNs, including GitHub Enterprise Cloud and GitHub Enterprise Cloud with Data Residency. GitHub Enterprise Server is unaffected. Please see the previous announcement for more information.
The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.