CuraDevOps

Plan archived

GitHub removing legacy SSH algorithms, requiring larger RSA keys

2026-09-23 15:14 UTC · GitHub Changelog · read the source ↗ #ssh-security#github#supply-chain
  • Platform/SRE — Plan: Review any SSH keys used for infrastructure automation against GitHub repos (deploy keys, Ansible/Terraform git sources) to confirm they meet the new algorithm and minimum RSA key-size requirements before the removals take effect; no hard deadline is published yet.
  • CI/CD — Plan: Audit SSH deploy keys and runner SSH credentials used to pull private repos or push artifacts via GitHub to ensure they use accepted algorithms and sufficiently large RSA keys; schedule rotation for any that don’t comply before the removal lands.
  • Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.