Letters, numbers, dots, hyphens, and underscores. Consecutive hyphens are not allowed — repository storage encodes owner/repo as owner--repo, so they would be ambiguous.
owner/repo
owner--repo