# Autorisations requises pour les applications GitHub

Pour chaque autorisation accordée à un GitHub App, il s’agit des points de terminaison d’API REST que l’application peut utiliser.

## À propos des GitHub App autorisations

GitHub Apps sont créés avec un ensemble d’autorisations. Les autorisations définissent les ressources auxquelles les GitHub App utilisateurs peuvent accéder via l’API. Pour plus d’informations, consultez « [Choix des autorisations pour une application GitHub](/fr/enterprise-server@3.18/apps/creating-github-apps/creating-github-apps/setting-permissions-for-github-apps) ».

Pour vous aider à choisir les autorisations appropriées, vous recevrez l’en-tête `X-Accepted-GitHub-Permissions` dans la réponse de l’API REST. L’en-tête vous indique les autorisations requises pour accéder au point de terminaison. Pour plus d’informations, consultez « [Résolution des problèmes de l’API REST](/fr/enterprise-server@3.18/rest/overview/troubleshooting#resource-not-accessible) ».

Ces autorisations sont nécessaires pour accéder aux ressources privées. Certains points de terminaison peuvent également être utilisés pour accéder à des ressources publiques sans ces autorisations. Consultez la documentation d’un point de terminaison pour savoir si ce dernier peut accéder aux ressources publiques sans autorisation.

Certains points de terminaison nécessitent plusieurs autorisations. D’autres points de terminaison fonctionnent avec n’importe quelle autorisation d’un ensemble d’autorisations. Dans ce cas, la colonne « Autorisations supplémentaires » comprend une coche. Consultez la documentation d’un point de terminaison pour obtenir plus d’informations sur les autorisations requises pour l’utiliser.

**Token types:** UAT = user access token, IAT = installation access token

## Enterprise permissions for "Custom properties"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /enterprises/{enterprise}/properties/schema` | write | UAT, IAT | ✗ |
| `PUT /enterprises/{enterprise}/properties/schema/organizations/{org}/{custom_property_name}/promote` | write | UAT, IAT | ✗ |
| `PUT /enterprises/{enterprise}/properties/schema/{custom_property_name}` | write | UAT, IAT | ✗ |
| `DELETE /enterprises/{enterprise}/properties/schema/{custom_property_name}` | write | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/properties/schema` | read | UAT, IAT | ✗ |
| `GET /enterprises/{enterprise}/properties/schema/{custom_property_name}` | read | UAT, IAT | ✗ |

## Enterprise permissions for "Enterprise SCIM"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /scim/v2/enterprises/{enterprise}/Groups` | write | UAT, IAT | ✗ |
| `PUT /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}` | write | UAT, IAT | ✗ |
| `PATCH /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}` | write | UAT, IAT | ✗ |
| `DELETE /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}` | write | UAT, IAT | ✗ |
| `POST /scim/v2/enterprises/{enterprise}/Users` | write | UAT, IAT | ✗ |
| `PUT /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}` | write | UAT, IAT | ✗ |
| `PATCH /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}` | write | UAT, IAT | ✗ |
| `DELETE /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}` | write | UAT, IAT | ✗ |
| `GET /scim/v2/enterprises/{enterprise}/Groups` | read | UAT, IAT | ✗ |
| `GET /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}` | read | UAT, IAT | ✗ |
| `GET /scim/v2/enterprises/{enterprise}/Users` | read | UAT, IAT | ✗ |
| `GET /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}` | read | UAT, IAT | ✗ |

## Organization permissions for "Administration"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /orgs/{org}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/oidc/customization/sub` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `PUT /orgs/{org}/actions/permissions/selected-actions` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/permissions/workflow` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/bypass-requests/push-rules` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/code-security/configurations` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/code-security/configurations/detach` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/code-security/configurations/{configuration_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/code-security/configurations/{configuration_id}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/code-security/configurations/{configuration_id}/attach` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/code-security/configurations/{configuration_id}/defaults` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/dependabot/repository-access` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/dependabot/repository-access/default-level` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/rulesets` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets/rule-suites` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/security-managers/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/security-managers/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/{security_product}/{enablement}` | write | UAT, IAT | ✗ |
| `GET /organizations/{organization_id}/custom_roles` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/actions/cache/usage` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/cache/usage-by-repository` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/oidc/customization/sub` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/repositories` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/selected-actions` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/permissions/workflow` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/audit-log` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-security/configurations` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-security/configurations/defaults` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-security/configurations/{configuration_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-security/configurations/{configuration_id}/repositories` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/custom-repository-roles` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/custom-repository-roles/{role_id}` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/dependabot/repository-access` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/installations` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/repository-fine-grained-permissions` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/security-managers` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/settings/billing/advanced-security` | read | UAT, IAT | ✗ |

## Organization permissions for "Custom organization roles"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/organization-roles` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/organization-roles/{role_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/organization-roles/{role_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/organization-fine-grained-permissions` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/organization-roles` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/organization-roles/{role_id}` | read | UAT, IAT | ✗ |

## Organization permissions for "Custom properties"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /orgs/{org}/properties/schema` | admin | UAT, IAT | ✗ |
| `PUT /orgs/{org}/properties/schema/{custom_property_name}` | admin | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/properties/schema/{custom_property_name}` | admin | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/properties/values` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/properties/schema` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/properties/schema/{custom_property_name}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/properties/values` | read | UAT, IAT | ✗ |

## Organization permissions for "Custom repository roles"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/custom-repository-roles` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/custom-repository-roles/{role_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/custom-repository-roles/{role_id}` | write | UAT, IAT | ✗ |
| `GET /organizations/{organization_id}/custom_roles` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/custom-repository-roles` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/custom-repository-roles/{role_id}` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/repository-fine-grained-permissions` | read | UAT, IAT | ✓ |

## Organization permissions for "Events"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /users/{username}/events/orgs/{org}` | read | UAT | ✗ |

## Organization permissions for "Members"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /orgs/{org}/external-group/{group_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/external-groups` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/members/{username}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/memberships/{username}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/memberships/{username}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/organization-roles/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/organization-roles/users/{username}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/organization-roles/users/{username}/{role_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/outside_collaborators/{username}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/outside_collaborators/{username}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/public_members/{username}` | write | UAT | ✗ |
| `DELETE /orgs/{org}/public_members/{username}` | write | UAT | ✗ |
| `POST /orgs/{org}/teams` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/teams/{team_slug}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/external-groups` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/teams/{team_slug}/external-groups` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/teams/{team_slug}/external-groups` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/teams/{team_slug}/memberships/{username}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/teams/{team_slug}/memberships/{username}` | write | UAT, IAT | ✗ |
| `PATCH /teams/{team_id}` | write | UAT, IAT | ✗ |
| `DELETE /teams/{team_id}` | write | UAT, IAT | ✗ |
| `PUT /teams/{team_id}/members/{username}` | write | UAT, IAT | ✗ |
| `DELETE /teams/{team_id}/members/{username}` | write | UAT, IAT | ✗ |
| `PUT /teams/{team_id}/memberships/{username}` | write | UAT, IAT | ✗ |
| `DELETE /teams/{team_id}/memberships/{username}` | write | UAT, IAT | ✗ |
| `PATCH /user/memberships/orgs/{org}` | write | UAT | ✗ |
| `GET /orgs/{org}/members` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/members/{username}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/memberships/{username}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/organization-roles/{role_id}/teams` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/organization-roles/{role_id}/users` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/outside_collaborators` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/public_members` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/public_members/{username}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/members` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/memberships/{username}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/repos` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `PUT /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/teams/{team_slug}/teams` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/members` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/members/{username}` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/memberships/{username}` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/repos` | read | UAT, IAT | ✗ |
| `GET /teams/{team_id}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `PUT /teams/{team_id}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `DELETE /teams/{team_id}/repos/{owner}/{repo}` | read | UAT, IAT | ✓ |
| `GET /teams/{team_id}/teams` | read | UAT, IAT | ✗ |
| `GET /user/memberships/orgs/{org}` | read | UAT | ✗ |

## Organization permissions for "Organization announcement banners"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /orgs/{org}/announcement` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/announcement` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/announcement` | read | UAT, IAT | ✗ |

## Organization permissions for "Organization bypass requests for secret scanning"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/bypass-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/bypass-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}` | read | UAT, IAT | ✓ |

## Organization permissions for "Organization dependabot secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /orgs/{org}/dependabot/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/dependabot/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/dependabot/secrets` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/dependabot/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/dependabot/secrets/{secret_name}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/dependabot/secrets/{secret_name}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Organization pre-receive hooks"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /orgs/{org}/pre-receive-hooks/{pre_receive_hook_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/pre-receive-hooks/{pre_receive_hook_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/pre-receive-hooks` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/pre-receive-hooks/{pre_receive_hook_id}` | read | UAT, IAT | ✗ |

## Organization permissions for "Organization private registries"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/private-registries` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/private-registries/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/private-registries/{secret_name}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/private-registries` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/private-registries/public-key` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/private-registries/{secret_name}` | read | UAT, IAT | ✗ |

## Organization permissions for "Personal access token requests"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/personal-access-token-requests` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/personal-access-token-requests/{pat_request_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/personal-access-token-requests` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/personal-access-token-requests/{pat_request_id}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Personal access tokens"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/personal-access-tokens` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/personal-access-tokens/{pat_id}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/personal-access-tokens` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/personal-access-tokens/{pat_id}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Secret scanning alert dismissal requests"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/dismissal-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning` | read | UAT, IAT | ✓ |

## Organization permissions for "Secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /orgs/{org}/actions/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/secrets/{secret_name}/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/actions/secrets` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/secrets/{secret_name}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/secrets/{secret_name}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Self-hosted runners"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/actions/runner-groups` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/actions/runner-groups/{runner_group_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/runners/generate-jitconfig` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/runners/registration-token` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/runners/remove-token` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runners/{runner_id}` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/runners/{runner_id}/labels/{name}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runner-groups` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runner-groups/{runner_group_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runner-groups/{runner_group_id}/runners` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runners` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runners/downloads` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runners/{runner_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/runners/{runner_id}/labels` | read | UAT, IAT | ✗ |

## Organization permissions for "Variables"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/actions/variables` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/actions/variables/{name}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/actions/variables/{name}` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/variables/{name}/repositories` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}` | write | UAT, IAT | ✓ |
| `GET /orgs/{org}/actions/variables` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/variables/{name}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/actions/variables/{name}/repositories` | read | UAT, IAT | ✗ |

## Organization permissions for "Webhooks"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/hooks` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/hooks/{hook_id}` | write | UAT, IAT | ✗ |
| `DELETE /orgs/{org}/hooks/{hook_id}` | write | UAT, IAT | ✗ |
| `PATCH /orgs/{org}/hooks/{hook_id}/config` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}/attempts` | write | UAT, IAT | ✗ |
| `POST /orgs/{org}/hooks/{hook_id}/pings` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks/{hook_id}` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks/{hook_id}/config` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks/{hook_id}/deliveries` | read | UAT, IAT | ✗ |
| `GET /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Actions"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/caches` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerun` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/oidc/customization/sub` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runs/{run_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancel` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancel` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logs` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobs` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disable` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enable` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/artifacts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/cache/usage` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/cache/usage-policy` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/caches` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/jobs/{job_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/oidc/customization/sub` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvals` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifacts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/logs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/workflows` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Administration"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /orgs/{org}/repos` | write | UAT, IAT | ✗ |
| `PUT /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | write | UAT, IAT | ✓ |
| `DELETE /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo}` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/actions/cache/usage-policy` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions/access` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions/selected-actions` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/permissions/workflow` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runners/generate-jitconfig` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runners/registration-token` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runners/remove-token` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/autolinks` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/code-scanning/default-setup` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/collaborators/{username}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/collaborators/{username}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/environments/{environment_name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/forks` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/invitations/{invitation_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/invitations/{invitation_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/keys` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/keys/{key_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/rulesets` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/topics` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/transfer` | write | UAT | ✗ |
| `PUT /repos/{owner}/{repo}/vulnerability-alerts` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/vulnerability-alerts` | write | UAT, IAT | ✗ |
| `POST /repos/{template_owner}/{template_repo}/generate` | write | UAT, IAT | ✓ |
| `PUT /teams/{team_id}/repos/{owner}/{repo}` | write | UAT, IAT | ✓ |
| `DELETE /teams/{team_id}/repos/{owner}/{repo}` | write | UAT, IAT | ✓ |
| `POST /user/repos` | write | UAT | ✗ |
| `PATCH /user/repository_invitations/{invitation_id}` | write | UAT | ✗ |
| `DELETE /user/repository_invitations/{invitation_id}` | write | UAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions/access` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions/selected-actions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/permissions/workflow` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runners` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runners/downloads` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runners/{runner_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labels` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/autolinks` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/autolinks/{autolink_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/automated-security-fixes` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/default-setup` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-security-configuration` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/apps` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/invitations` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/keys` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/keys/{key_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/replicas/caches` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets/rule-suites` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets/rule-suites/{rule_suite_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/teams` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/vulnerability-alerts` | read | UAT, IAT | ✗ |
| `GET /user/repository_invitations` | read | UAT | ✗ |

## Repository permissions for "Checks"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/check-runs` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequest` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/check-suites` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/check-suites/preferences` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/check-suites/{check_suite_id}/rerequest` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/check-runs/{check_run_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/check-runs/{check_run_id}/annotations` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/check-suites/{check_suite_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/check-suites/{check_suite_id}/check-runs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}/check-runs` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}/check-suites` | read | UAT, IAT | ✗ |

## Repository permissions for "Code scanning alerts"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/code-scanning/sarifs` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/code-scanning/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/analyses` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Commit statuses"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/statuses/{sha}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}/status` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}/statuses` | read | UAT, IAT | ✗ |

## Repository permissions for "Contents"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/branches/{branch}/rename` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/bypass-requests/push-rules` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/bypass-requests/push-rules/{bypass_request_number}` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/comments/{comment_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/comments/{comment_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/comments/{comment_id}/reactions` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/dependency-graph/snapshots` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/dispatches` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/blobs` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/commits` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/refs` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/git/refs` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/git/refs/{ref}` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/git/refs/{ref}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/git/refs/{ref}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/tags` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/git/trees` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/merge-upstream` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/merges` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/releases` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/releases` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/releases/generate-notes` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/releases/{release_id}` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/releases/{release_id}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/releases/{release_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/secret-scanning/push-protection-bypasses` | write | UAT | ✗ |
| `POST /markdown` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/activity` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/branches/{branch}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/codeowners/errors` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-head` | read | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/commits/{commit_sha}/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{ref}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/compare/{basehead}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/contents/{path}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependency-graph/sbom` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}` | read | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}` | read | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}` | read | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/forks` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/git/blobs/{file_sha}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/commits/{commit_sha}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/matching-refs/{ref}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/ref/{ref}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/tags/{tag_sha}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/git/trees/{tree_sha}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/readme` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/readme/{dir}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/assets/{asset_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/latest` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/tags/{tag}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/{release_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/releases/{release_id}/assets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/tarball/{ref}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/zipball/{ref}` | read | UAT, IAT | ✗ |
| `POST /repos/{template_owner}/{template_repo}/generate` | read | UAT, IAT | ✓ |

## Repository permissions for "Custom properties"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/properties/values` | write | UAT, IAT | ✗ |

## Repository permissions for "Dependabot alerts"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/dependabot/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number}` | read | UAT, IAT | ✗ |

## Repository permissions for "Dependabot secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /repos/{owner}/{repo}/dependabot/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/dependabot/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/secrets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/dependabot/secrets/{secret_name}` | read | UAT, IAT | ✗ |

## Repository permissions for "Deployments"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/deployment_protection_rule` | write | IAT | ✗ |
| `POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/deployments` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/deployments/{deployment_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/deployments/{deployment_id}/statuses` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/deployments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/deployments/{deployment_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses/{status_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Environments"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/environments/{environment_name}/variables` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/secrets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/variables` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}` | read | UAT, IAT | ✗ |

## Repository permissions for "Issues"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/issues` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/issues/{issue_number}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/assignees` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/comments` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/lock` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/reactions` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/labels` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/labels/{name}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/labels/{name}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/milestones` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/milestones/{milestone_number}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/milestones/{milestone_number}` | write | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/assignees` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/assignees/{assignee}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/comments` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/comments/{comment_id}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/events` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/events/{event_id}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/comments` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/events` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/issue-field-values` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/reactions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/timeline` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/labels/{name}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones/{milestone_number}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels` | read | UAT, IAT | ✓ |

## Repository permissions for "Metadata"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /orgs/{org}/repos` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/collaborators` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/collaborators/{username}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/collaborators/{username}/permission` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/comments/{comment_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/comments/{comment_id}/reactions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/commits/{commit_sha}/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/contributors` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/events` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/forks` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/languages` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/license` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/properties/values` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rules/branches/{branch}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/rulesets/{ruleset_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stargazers` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/code_frequency` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/commit_activity` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/contributors` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/participation` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/stats/punch_card` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/subscribers` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/tags` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/topics` | read | UAT, IAT | ✗ |
| `GET /repositories` | read | UAT, IAT | ✗ |
| `GET /search/labels` | read | UAT, IAT | ✗ |
| `GET /user/installations/{installation_id}/repositories` | read | UAT | ✗ |
| `GET /user/repos` | read | UAT | ✗ |
| `GET /users/{username}/repos` | read | UAT, IAT | ✗ |

## Repository permissions for "Pages"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/pages` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/pages/builds` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pages/deployments` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}/cancel` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages/builds` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages/builds/latest` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages/builds/{build_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Pull requests"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/issues/{issue_number}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/assignees` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/comments` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}` | write | UAT, IAT | ✓ |
| `PUT /repos/{owner}/{repo}/issues/{issue_number}/lock` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/labels` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/labels/{name}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/labels/{name}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/milestones` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/milestones/{milestone_number}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/milestones/{milestone_number}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/pulls` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/pulls/{pull_number}` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/comments` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replies` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissals` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/events` | write | UAT, IAT | ✗ |
| `PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branch` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/assignees` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/assignees/{assignee}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/commits/{commit_sha}/pulls` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/issues/comments` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/comments/{comment_id}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/events/{event_id}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/comments` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/events` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/issues/{issue_number}/timeline` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/labels/{name}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones/{milestone_number}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/pulls` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/comments/{comment_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/comments` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/commits` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/files` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/merge` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/comments` | read | UAT, IAT | ✗ |

## Repository permissions for "Repository pre-receive hooks"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/pre-receive-hooks/{pre_receive_hook_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/pre-receive-hooks/{pre_receive_hook_id}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pre-receive-hooks` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/pre-receive-hooks/{pre_receive_hook_id}` | read | UAT, IAT | ✗ |

## Repository permissions for "Secret scanning alert dismissal requests"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}` | write | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning` | read | UAT, IAT | ✓ |

## Repository permissions for "Secret scanning alerts"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}` | write | UAT, IAT | ✗ |
| `GET /orgs/{org}/bypass-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/dismissal-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /orgs/{org}/secret-scanning/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/bypass-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/bypass-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}` | read | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}` | read | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}` | read | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/bypass-responses/secret-scanning/{bypass_response_id}` | read | UAT | ✗ |
| `GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}` | read | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}` | read | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}` | read | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/secret-scanning/alerts` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locations` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/secret-scanning/scan-history` | read | UAT, IAT | ✗ |

## Repository permissions for "Secret scanning push protection bypass requests"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}` | write | UAT, IAT | ✓ |
| `GET /repos/{owner}/{repo}/bypass-requests/secret-scanning` | read | UAT, IAT | ✓ |

## Repository permissions for "Secrets"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /repos/{owner}/{repo}/actions/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/secrets/{secret_name}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/organization-secrets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/secrets` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/secrets/public-key` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/secrets/{secret_name}` | read | UAT, IAT | ✗ |

## Repository permissions for "Variables"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/actions/variables` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/actions/variables/{name}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/actions/variables/{name}` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/organization-variables` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/variables` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/actions/variables/{name}` | read | UAT, IAT | ✗ |

## Repository permissions for "Webhooks"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /repos/{owner}/{repo}/hooks` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/hooks/{hook_id}` | write | UAT, IAT | ✗ |
| `DELETE /repos/{owner}/{repo}/hooks/{hook_id}` | write | UAT, IAT | ✗ |
| `PATCH /repos/{owner}/{repo}/hooks/{hook_id}/config` | write | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}/attempts` | write | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks/{hook_id}` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks/{hook_id}/config` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries` | read | UAT, IAT | ✗ |
| `GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}` | read | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/hooks/{hook_id}/pings` | read | UAT, IAT | ✗ |
| `POST /repos/{owner}/{repo}/hooks/{hook_id}/tests` | read | UAT, IAT | ✗ |

## Repository permissions for "Workflows"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `DELETE /repos/{owner}/{repo}/contents/{path}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/git/refs` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/git/refs/{ref}` | write | UAT, IAT | ✓ |
| `POST /repos/{owner}/{repo}/releases` | write | UAT, IAT | ✓ |
| `PATCH /repos/{owner}/{repo}/releases/{release_id}` | write | UAT, IAT | ✓ |

## User permissions for "Email addresses"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /user/emails` | write | UAT | ✗ |
| `DELETE /user/emails` | write | UAT | ✗ |
| `GET /user/emails` | read | UAT | ✗ |
| `GET /user/public_emails` | read | UAT | ✗ |

## User permissions for "Followers"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /user/following/{username}` | write | UAT | ✗ |
| `DELETE /user/following/{username}` | write | UAT | ✗ |
| `GET /user/followers` | read | UAT | ✗ |
| `GET /user/following` | read | UAT | ✗ |
| `GET /user/following/{username}` | read | UAT | ✗ |

## User permissions for "GPG keys"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /user/gpg_keys` | write | UAT | ✗ |
| `DELETE /user/gpg_keys/{gpg_key_id}` | write | UAT | ✗ |
| `GET /user/gpg_keys` | read | UAT | ✗ |
| `GET /user/gpg_keys/{gpg_key_id}` | read | UAT | ✗ |

## User permissions for "Gists"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /gists` | write | UAT | ✗ |
| `PATCH /gists/{gist_id}` | write | UAT | ✗ |
| `DELETE /gists/{gist_id}` | write | UAT | ✗ |
| `POST /gists/{gist_id}/comments` | write | UAT | ✗ |
| `PATCH /gists/{gist_id}/comments/{comment_id}` | write | UAT | ✗ |
| `DELETE /gists/{gist_id}/comments/{comment_id}` | write | UAT | ✗ |
| `POST /gists/{gist_id}/forks` | write | UAT | ✗ |
| `PUT /gists/{gist_id}/star` | write | UAT | ✗ |
| `DELETE /gists/{gist_id}/star` | write | UAT | ✗ |

## User permissions for "Git SSH keys"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /user/keys` | write | UAT | ✗ |
| `DELETE /user/keys/{key_id}` | write | UAT | ✗ |
| `GET /user/keys` | read | UAT | ✗ |
| `GET /user/keys/{key_id}` | read | UAT | ✗ |
| `GET /users/{username}/keys` | read | UAT, IAT | ✗ |

## User permissions for "Private repository invitations"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /repos/{owner}/{repo}/invitations` | read | UAT, IAT | ✓ |

## User permissions for "Profile"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PATCH /user` | write | UAT | ✗ |
| `POST /user/social_accounts` | write | UAT | ✗ |
| `DELETE /user/social_accounts` | write | UAT | ✗ |

## User permissions for "SSH signing keys"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `POST /user/ssh_signing_keys` | write | UAT | ✗ |
| `DELETE /user/ssh_signing_keys/{ssh_signing_key_id}` | write | UAT | ✗ |
| `GET /user/ssh_signing_keys` | read | UAT | ✗ |
| `GET /user/ssh_signing_keys/{ssh_signing_key_id}` | read | UAT | ✗ |

## User permissions for "Starring"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `PUT /user/starred/{owner}/{repo}` | write | UAT | ✓ |
| `DELETE /user/starred/{owner}/{repo}` | write | UAT | ✓ |
| `GET /user/starred` | read | UAT | ✗ |
| `GET /user/starred/{owner}/{repo}` | read | UAT | ✓ |
| `GET /users/{username}/starred` | read | UAT, IAT | ✗ |

## User permissions for "Watching"

| Endpoint | Access | Tokens | Additional Permissions |
|----------|--------|--------|------------------------|
| `GET /user/subscriptions` | read | UAT | ✗ |
| `GET /users/{username}/subscriptions` | read | UAT, IAT | ✗ |