Permissions required for fine-grained personal access tokens

In this article

These are the permissions required for a fine-grained personal access token to use each REST API endpoint that works with fine-grained personal access tokens.

About permissions required for fine-grained personal access token

When you create a fine-grained personal access token, you grant it a set of permissions. Permissions define what resources the GitHub App can access via the API. For more information, see "Managing your personal access tokens."

To help you choose the correct permissions, you will receive the X-Accepted-GitHub-Permissions header in the REST API response. The header will tell you what permissions are required in order to access the endpoint. For more information, see "Troubleshooting the REST API."

These permissions are required to access private resources with the following endpoints. Some endpoints can also be used to access public resources without these permissions.

Some endpoints require additional permissions. When this is the case, the "Additional permissions" column will indicate the other permissions that are required to use the endpoint.

Business permissions for "Enterprise administration"

EndpointAccessAdditional permissions
GET /enterprises/{enterprise}/actions/cache/usagewrite✖️
PUT /enterprises/{enterprise}/actions/oidc/customization/issuerwrite✖️
GET /enterprises/{enterprise}/settings/billing/actionswrite✖️
GET /enterprises/{enterprise}/settings/billing/advanced-securitywrite✖️
GET /enterprises/{enterprise}/settings/billing/packageswrite✖️
GET /enterprises/{enterprise}/settings/billing/shared-storagewrite✖️
GET /scim/v2/Groupswrite✖️
POST /scim/v2/Groupswrite✖️
GET /scim/v2/Groups/{scim_group_id}write✖️
PUT /scim/v2/Groups/{scim_group_id}write✖️
PATCH /scim/v2/Groups/{scim_group_id}write✖️
DELETE /scim/v2/Groups/{scim_group_id}write✖️
GET /scim/v2/Userswrite✖️
POST /scim/v2/Userswrite✖️
GET /scim/v2/Users/{scim_user_id}write✖️
PUT /scim/v2/Users/{scim_user_id}write✖️
DELETE /scim/v2/Users/{scim_user_id}write✖️
GET /enterprise-installation/{enterprise_or_org}/server-statisticsread
GET /enterprises/{enterprise}/audit-logread✖️

Organization permissions for "Administration"

EndpointAccessAdditional permissions
PATCH /orgs/{org}write✖️
DELETE /orgs/{org}write✖️
PUT /orgs/{org}/actions/oidc/customization/subwrite✖️
PUT /orgs/{org}/actions/permissionswrite✖️
PUT /orgs/{org}/actions/permissions/repositorieswrite✖️
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}write
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}write
PUT /orgs/{org}/actions/permissions/selected-actionswrite✖️
PUT /orgs/{org}/actions/permissions/workflowwrite✖️
DELETE /orgs/{org}/credential-authorizations/{credential_id}write✖️
PUT /orgs/{org}/interaction-limitswrite✖️
DELETE /orgs/{org}/interaction-limitswrite✖️
GET /orgs/{org}/rulesetswrite✖️
POST /orgs/{org}/rulesetswrite✖️
GET /orgs/{org}/rulesets/rule-suiteswrite✖️
GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}write✖️
GET /orgs/{org}/rulesets/{ruleset_id}write✖️
PUT /orgs/{org}/rulesets/{ruleset_id}write✖️
DELETE /orgs/{org}/rulesets/{ruleset_id}write✖️
PUT /orgs/{org}/security-managers/teams/{team_slug}write✖️
DELETE /orgs/{org}/security-managers/teams/{team_slug}write✖️
POST /orgs/{org}/{security_product}/{enablement}write✖️
GET /enterprise-installation/{enterprise_or_org}/server-statisticsread
GET /organizations/{organization_id}/custom_rolesread
GET /orgs/{org}/actions/cache/usageread✖️
GET /orgs/{org}/actions/cache/usage-by-repositoryread✖️
GET /orgs/{org}/actions/oidc/customization/subread✖️
GET /orgs/{org}/actions/permissionsread✖️
GET /orgs/{org}/actions/permissions/repositoriesread✖️
GET /orgs/{org}/actions/permissions/selected-actionsread✖️
GET /orgs/{org}/actions/permissions/workflowread✖️
GET /orgs/{org}/audit-logread✖️
GET /orgs/{org}/credential-authorizationsread✖️
GET /orgs/{org}/custom-repository-rolesread
GET /orgs/{org}/custom-repository-roles/{role_id}read
GET /orgs/{org}/custom_roles/{role_id}read
GET /orgs/{org}/fine_grained_permissionsread
GET /orgs/{org}/installationsread✖️
GET /orgs/{org}/interaction-limitsread✖️
GET /orgs/{org}/security-managersread✖️
GET /orgs/{org}/settings/billing/actionsread✖️
GET /orgs/{org}/settings/billing/advanced-securityread✖️
GET /orgs/{org}/settings/billing/packagesread✖️
GET /orgs/{org}/settings/billing/shared-storageread✖️

Organization permissions for "Blocking users"

EndpointAccessAdditional permissions
PUT /orgs/{org}/blocks/{username}write✖️
DELETE /orgs/{org}/blocks/{username}write✖️
GET /orgs/{org}/blocksread✖️
GET /orgs/{org}/blocks/{username}read✖️

Organization permissions for "Custom organization roles"

EndpointAccessAdditional permissions
POST /orgs/{org}/organization-roleswrite✖️
PATCH /orgs/{org}/organization-roles/{role_id}write✖️
DELETE /orgs/{org}/organization-roles/{role_id}write✖️
GET /orgs/{org}/organization-fine-grained-permissionsread✖️
GET /orgs/{org}/organization-rolesread✖️
GET /orgs/{org}/organization-roles/{role_id}read✖️

Organization permissions for "Custom properties"

EndpointAccessAdditional permissions
PATCH /orgs/{org}/properties/schemaadmin✖️
PUT /orgs/{org}/properties/schema/{custom_property_name}admin✖️
DELETE /orgs/{org}/properties/schema/{custom_property_name}admin✖️
PATCH /orgs/{org}/properties/valueswrite✖️
GET /orgs/{org}/properties/schemaread✖️
GET /orgs/{org}/properties/schema/{custom_property_name}read✖️
GET /orgs/{org}/properties/valuesread✖️

Organization permissions for "Custom repository roles"

EndpointAccessAdditional permissions
POST /orgs/{org}/custom-repository-roleswrite✖️
PATCH /orgs/{org}/custom-repository-roles/{role_id}write✖️
DELETE /orgs/{org}/custom-repository-roles/{role_id}write✖️
POST /orgs/{org}/custom_roleswrite✖️
PATCH /orgs/{org}/custom_roles/{role_id}write✖️
DELETE /orgs/{org}/custom_roles/{role_id}write✖️
GET /organizations/{organization_id}/custom_rolesread
GET /orgs/{org}/custom-repository-rolesread
GET /orgs/{org}/custom-repository-roles/{role_id}read
GET /orgs/{org}/custom_roles/{role_id}read
GET /orgs/{org}/fine_grained_permissionsread

Organization permissions for "Events"

EndpointAccessAdditional permissions
GET /users/{username}/events/orgs/{org}read✖️

Organization permissions for "GitHub Copilot Business"

EndpointAccessAdditional permissions
GET /orgs/{org}/copilot/billingwrite✖️
GET /orgs/{org}/copilot/billing/seatswrite✖️
POST /orgs/{org}/copilot/billing/selected_teamswrite✖️

Organization permissions for "Members"

EndpointAccessAdditional permissions
GET /orgs/{org}/external-group/{group_id}write✖️
GET /orgs/{org}/external-groupswrite✖️
POST /orgs/{org}/invitationswrite✖️
DELETE /orgs/{org}/invitations/{invitation_id}write✖️
DELETE /orgs/{org}/members/{username}write✖️
PUT /orgs/{org}/memberships/{username}write✖️
DELETE /orgs/{org}/memberships/{username}write✖️
DELETE /orgs/{org}/organization-roles/teams/{team_slug}write✖️
PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}write✖️
DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}write✖️
DELETE /orgs/{org}/organization-roles/users/{username}write✖️
PUT /orgs/{org}/organization-roles/users/{username}/{role_id}write✖️
DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}write✖️
PUT /orgs/{org}/outside_collaborators/{username}write✖️
DELETE /orgs/{org}/outside_collaborators/{username}write✖️
PUT /orgs/{org}/public_members/{username}write✖️
DELETE /orgs/{org}/public_members/{username}write✖️
GET /orgs/{org}/team-sync/groupswrite✖️
POST /orgs/{org}/teamswrite✖️
GET /orgs/{org}/teams/{team_slug}/external-groupswrite✖️
PATCH /orgs/{org}/teams/{team_slug}/external-groupswrite✖️
DELETE /orgs/{org}/teams/{team_slug}/external-groupswrite✖️
POST /scim/v2/organizations/{org}/Userswrite✖️
PUT /scim/v2/organizations/{org}/Users/{scim_user_id}write✖️
PATCH /scim/v2/organizations/{org}/Users/{scim_user_id}write✖️
DELETE /scim/v2/organizations/{org}/Users/{scim_user_id}write✖️
PUT /teams/{team_id}/members/{username}write✖️
DELETE /teams/{team_id}/members/{username}write✖️
PATCH /user/memberships/orgs/{org}write✖️
GET /orgs/{org}/failed_invitationsread✖️
GET /orgs/{org}/invitationsread✖️
GET /orgs/{org}/invitations/{invitation_id}/teamsread✖️
GET /orgs/{org}/membersread✖️
GET /orgs/{org}/members/{username}read✖️
GET /orgs/{org}/memberships/{username}read✖️
GET /orgs/{org}/organization-roles/{role_id}/teamsread✖️
GET /orgs/{org}/organization-roles/{role_id}/usersread✖️
GET /orgs/{org}/outside_collaboratorsread✖️
GET /orgs/{org}/public_membersread✖️
GET /orgs/{org}/public_members/{username}read✖️
GET /orgs/{org}/teamsread✖️
GET /scim/v2/organizations/{org}/Usersread✖️
GET /scim/v2/organizations/{org}/Users/{scim_user_id}read✖️
GET /teams/{team_id}/members/{username}read✖️
GET /user/memberships/orgs/{org}read✖️

Organization permissions for "Organization announcement banners"

EndpointAccessAdditional permissions
PATCH /orgs/{org}/announcementwrite✖️
DELETE /orgs/{org}/announcementwrite✖️
GET /orgs/{org}/announcementread✖️

Organization permissions for "Organization codespaces secrets"

EndpointAccessAdditional permissions
PUT /orgs/{org}/codespaces/secrets/{secret_name}write✖️
DELETE /orgs/{org}/codespaces/secrets/{secret_name}write✖️
PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositorieswrite✖️
PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}write
DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}write
GET /orgs/{org}/codespaces/secretsread✖️
GET /orgs/{org}/codespaces/secrets/public-keyread✖️
GET /orgs/{org}/codespaces/secrets/{secret_name}read✖️
GET /orgs/{org}/codespaces/secrets/{secret_name}/repositoriesread✖️

Organization permissions for "Organization codespaces settings"

EndpointAccessAdditional permissions
PUT /orgs/{org}/codespaces/accesswrite✖️
POST /orgs/{org}/codespaces/access/selected_userswrite✖️
DELETE /orgs/{org}/codespaces/access/selected_userswrite✖️

Organization permissions for "Organization codespaces"

EndpointAccessAdditional permissions
DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}write
POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stopwrite
GET /orgs/{org}/codespacesread
GET /orgs/{org}/members/{username}/codespacesread

Organization permissions for "Organization dependabot secrets"

EndpointAccessAdditional permissions
PUT /orgs/{org}/dependabot/secrets/{secret_name}write✖️
DELETE /orgs/{org}/dependabot/secrets/{secret_name}write✖️
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositorieswrite✖️
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}write
DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}write
GET /orgs/{org}/dependabot/secretsread✖️
GET /orgs/{org}/dependabot/secrets/public-keyread✖️
GET /orgs/{org}/dependabot/secrets/{secret_name}read✖️
GET /orgs/{org}/dependabot/secrets/{secret_name}/repositoriesread✖️

Organization permissions for "Projects"

EndpointAccessAdditional permissions
GET /projects/{project_id}/collaboratorsadmin
PUT /projects/{project_id}/collaborators/{username}admin
DELETE /projects/{project_id}/collaborators/{username}admin
GET /projects/{project_id}/collaborators/{username}/permissionadmin
POST /orgs/{org}/projectswrite✖️
PATCH /projects/columns/cards/{card_id}write
DELETE /projects/columns/cards/{card_id}write
POST /projects/columns/cards/{card_id}/moveswrite
PATCH /projects/columns/{column_id}write
DELETE /projects/columns/{column_id}write
POST /projects/columns/{column_id}/cardswrite
POST /projects/columns/{column_id}/moveswrite
PATCH /projects/{project_id}write
DELETE /projects/{project_id}write
POST /projects/{project_id}/columnswrite
GET /orgs/{org}/projectsread✖️
GET /projects/columns/cards/{card_id}read
GET /projects/columns/{column_id}read
GET /projects/columns/{column_id}/cardsread
GET /projects/{project_id}read
GET /projects/{project_id}/columnsread

Organization permissions for "Secrets"

EndpointAccessAdditional permissions
PUT /orgs/{org}/actions/secrets/{secret_name}write✖️
DELETE /orgs/{org}/actions/secrets/{secret_name}write✖️
PUT /orgs/{org}/actions/secrets/{secret_name}/repositorieswrite✖️
PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}write
DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}write
GET /orgs/{org}/actions/secretsread✖️
GET /orgs/{org}/actions/secrets/public-keyread✖️
GET /orgs/{org}/actions/secrets/{secret_name}read✖️
GET /orgs/{org}/actions/secrets/{secret_name}/repositoriesread✖️

Organization permissions for "Self-hosted runners"

EndpointAccessAdditional permissions
POST /orgs/{org}/actions/runner-groupswrite✖️
PATCH /orgs/{org}/actions/runner-groups/{runner_group_id}write✖️
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}write✖️
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositorieswrite✖️
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}write
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}write
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runnerswrite✖️
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}write✖️
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}write✖️
POST /orgs/{org}/actions/runners/generate-jitconfigwrite✖️
POST /orgs/{org}/actions/runners/registration-tokenwrite✖️
POST /orgs/{org}/actions/runners/remove-tokenwrite✖️
DELETE /orgs/{org}/actions/runners/{runner_id}write✖️
POST /orgs/{org}/actions/runners/{runner_id}/labelswrite✖️
PUT /orgs/{org}/actions/runners/{runner_id}/labelswrite✖️
DELETE /orgs/{org}/actions/runners/{runner_id}/labelswrite✖️
DELETE /orgs/{org}/actions/runners/{runner_id}/labels/{name}write✖️
GET /orgs/{org}/actions/runner-groupsread✖️
GET /orgs/{org}/actions/runner-groups/{runner_group_id}read✖️
GET /orgs/{org}/actions/runner-groups/{runner_group_id}/repositoriesread✖️
GET /orgs/{org}/actions/runner-groups/{runner_group_id}/runnersread✖️
GET /orgs/{org}/actions/runnersread✖️
GET /orgs/{org}/actions/runners/downloadsread✖️
GET /orgs/{org}/actions/runners/{runner_id}read✖️
GET /orgs/{org}/actions/runners/{runner_id}/labelsread✖️

Organization permissions for "Team discussions"

EndpointAccessAdditional permissions
DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions/{reaction_id}write✖️
DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions/{reaction_id}write✖️

Organization permissions for "Variables"

EndpointAccessAdditional permissions
POST /orgs/{org}/actions/variableswrite✖️
PATCH /orgs/{org}/actions/variables/{name}write✖️
DELETE /orgs/{org}/actions/variables/{name}write✖️
PUT /orgs/{org}/actions/variables/{name}/repositorieswrite✖️
PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}write
GET /orgs/{org}/actions/variablesread✖️
GET /orgs/{org}/actions/variables/{name}read✖️
GET /orgs/{org}/actions/variables/{name}/repositoriesread✖️

Organization permissions for "Webhooks"

EndpointAccessAdditional permissions
POST /orgs/{org}/hookswrite✖️
PATCH /orgs/{org}/hooks/{hook_id}write✖️
DELETE /orgs/{org}/hooks/{hook_id}write✖️
PATCH /orgs/{org}/hooks/{hook_id}/configwrite✖️
POST /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}/attemptswrite✖️
POST /orgs/{org}/hooks/{hook_id}/pingswrite✖️
GET /orgs/{org}/hooksread✖️
GET /orgs/{org}/hooks/{hook_id}read✖️
GET /orgs/{org}/hooks/{hook_id}/configread✖️
GET /orgs/{org}/hooks/{hook_id}/deliveriesread✖️
GET /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}read✖️

Repository permissions for "Actions"

EndpointAccessAdditional permissions
DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}write✖️
DELETE /repos/{owner}/{repo}/actions/cacheswrite✖️
DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}write✖️
POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerunwrite✖️
PUT /repos/{owner}/{repo}/actions/oidc/customization/subwrite✖️
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}write✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/approvewrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancelwrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancelwrite✖️
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logswrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerunwrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobswrite✖️
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disablewrite✖️
POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatcheswrite✖️
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enablewrite✖️
GET /repos/{owner}/{repo}/actions/artifactsread✖️
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}read✖️
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}read✖️
GET /repos/{owner}/{repo}/actions/cache/usageread✖️
GET /repos/{owner}/{repo}/actions/cachesread✖️
GET /repos/{owner}/{repo}/actions/jobs/{job_id}read✖️
GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logsread✖️
GET /repos/{owner}/{repo}/actions/oidc/customization/subread✖️
GET /repos/{owner}/{repo}/actions/runsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}read✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvalsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifactsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}read✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/logsread✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}/timingread✖️
GET /repos/{owner}/{repo}/actions/workflowsread✖️
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}read✖️
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runsread✖️
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/timingread✖️
GET /repos/{owner}/{repo}/environmentsread✖️
GET /repos/{owner}/{repo}/environments/{environment_name}read✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policiesread✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}read✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rulesread✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/appsread✖️

Repository permissions for "Administration"

EndpointAccessAdditional permissions
POST /orgs/{org}/reposwrite✖️
PATCH /repos/{owner}/{repo}write✖️
DELETE /repos/{owner}/{repo}write✖️
PUT /repos/{owner}/{repo}/actions/permissionswrite✖️
PUT /repos/{owner}/{repo}/actions/permissions/accesswrite✖️
PUT /repos/{owner}/{repo}/actions/permissions/selected-actionswrite✖️
PUT /repos/{owner}/{repo}/actions/permissions/workflowwrite✖️
POST /repos/{owner}/{repo}/actions/runners/generate-jitconfigwrite✖️
POST /repos/{owner}/{repo}/actions/runners/registration-tokenwrite✖️
POST /repos/{owner}/{repo}/actions/runners/remove-tokenwrite✖️
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}write✖️
POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswrite✖️
PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswrite✖️
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswrite✖️
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}write✖️
POST /repos/{owner}/{repo}/autolinkswrite✖️
DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}write✖️
PUT /repos/{owner}/{repo}/automated-security-fixeswrite✖️
DELETE /repos/{owner}/{repo}/automated-security-fixeswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protectionwrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protectionwrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminswrite✖️
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatureswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatureswrite✖️
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checkswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checkswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictionswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswrite✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswrite✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswrite✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswrite✖️
PATCH /repos/{owner}/{repo}/code-scanning/default-setupwrite✖️
PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write
DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write
PUT /repos/{owner}/{repo}/collaborators/{username}write✖️
DELETE /repos/{owner}/{repo}/collaborators/{username}write✖️
PUT /repos/{owner}/{repo}/environments/{environment_name}write✖️
DELETE /repos/{owner}/{repo}/environments/{environment_name}write✖️
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policieswrite✖️
PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}write✖️
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}write✖️
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_ruleswrite✖️
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}write✖️
POST /repos/{owner}/{repo}/forkswrite
PUT /repos/{owner}/{repo}/interaction-limitswrite✖️
DELETE /repos/{owner}/{repo}/interaction-limitswrite✖️
PATCH /repos/{owner}/{repo}/invitations/{invitation_id}write✖️
DELETE /repos/{owner}/{repo}/invitations/{invitation_id}write✖️
POST /repos/{owner}/{repo}/keyswrite✖️
DELETE /repos/{owner}/{repo}/keys/{key_id}write✖️
POST /repos/{owner}/{repo}/pageswrite
PUT /repos/{owner}/{repo}/pageswrite
DELETE /repos/{owner}/{repo}/pageswrite
GET /repos/{owner}/{repo}/pages/healthwrite
PUT /repos/{owner}/{repo}/private-vulnerability-reportingwrite✖️
DELETE /repos/{owner}/{repo}/private-vulnerability-reportingwrite✖️
POST /repos/{owner}/{repo}/rulesetswrite✖️
GET /repos/{owner}/{repo}/rulesets/rule-suiteswrite✖️
GET /repos/{owner}/{repo}/rulesets/rule-suites/{rule_suite_id}write✖️
PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}write✖️
DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}write✖️
POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forkswrite
POST /repos/{owner}/{repo}/tags/protectionwrite✖️
DELETE /repos/{owner}/{repo}/tags/protection/{tag_protection_id}write✖️
PUT /repos/{owner}/{repo}/topicswrite✖️
POST /repos/{owner}/{repo}/transferwrite✖️
PUT /repos/{owner}/{repo}/vulnerability-alertswrite✖️
DELETE /repos/{owner}/{repo}/vulnerability-alertswrite✖️
POST /user/reposwrite✖️
PATCH /user/repository_invitations/{invitation_id}write✖️
DELETE /user/repository_invitations/{invitation_id}write✖️
GET /repos/{owner}/{repo}/actions/permissionsread✖️
GET /repos/{owner}/{repo}/actions/permissions/accessread✖️
GET /repos/{owner}/{repo}/actions/permissions/selected-actionsread✖️
GET /repos/{owner}/{repo}/actions/permissions/workflowread✖️
GET /repos/{owner}/{repo}/actions/runnersread✖️
GET /repos/{owner}/{repo}/actions/runners/downloadsread✖️
GET /repos/{owner}/{repo}/actions/runners/{runner_id}read✖️
GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labelsread✖️
GET /repos/{owner}/{repo}/autolinksread✖️
GET /repos/{owner}/{repo}/autolinks/{autolink_id}read✖️
GET /repos/{owner}/{repo}/automated-security-fixesread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protectionread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signaturesread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checksread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictionsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamsread✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/usersread✖️
GET /repos/{owner}/{repo}/interaction-limitsread✖️
GET /repos/{owner}/{repo}/invitationsread✖️
GET /repos/{owner}/{repo}/keysread✖️
GET /repos/{owner}/{repo}/keys/{key_id}read✖️
GET /repos/{owner}/{repo}/tags/protectionread✖️
GET /repos/{owner}/{repo}/teamsread✖️
GET /repos/{owner}/{repo}/traffic/clonesread✖️
GET /repos/{owner}/{repo}/traffic/popular/pathsread✖️
GET /repos/{owner}/{repo}/traffic/popular/referrersread✖️
GET /repos/{owner}/{repo}/traffic/viewsread✖️
GET /repos/{owner}/{repo}/vulnerability-alertsread✖️
GET /user/repository_invitationsread✖️

Repository permissions for "Checks"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/check-runswrite✖️
PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}write✖️
POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequestwrite✖️
POST /repos/{owner}/{repo}/check-suiteswrite✖️
PATCH /repos/{owner}/{repo}/check-suites/preferenceswrite✖️
POST /repos/{owner}/{repo}/check-suites/{check_suite_id}/rerequestwrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread
GET /repos/{owner}/{repo}/check-runs/{check_run_id}read✖️
GET /repos/{owner}/{repo}/check-runs/{check_run_id}/annotationsread✖️
GET /repos/{owner}/{repo}/check-suites/{check_suite_id}read✖️
GET /repos/{owner}/{repo}/check-suites/{check_suite_id}/check-runsread✖️
GET /repos/{owner}/{repo}/commits/{ref}/check-runsread✖️
GET /repos/{owner}/{repo}/commits/{ref}/check-suitesread✖️

Repository permissions for "Code scanning alerts"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}write✖️
DELETE /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}write✖️
POST /repos/{owner}/{repo}/code-scanning/sarifswrite✖️
GET /orgs/{org}/code-scanning/alertsread✖️
GET /repos/{owner}/{repo}/code-scanning/alertsread✖️
GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}read✖️
GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instancesread✖️
GET /repos/{owner}/{repo}/code-scanning/analysesread✖️
GET /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}read✖️
GET /repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id}read✖️

Repository permissions for "Codespaces lifecycle admin"

EndpointAccessAdditional permissions
POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stopwrite
POST /user/codespaces/{codespace_name}/exportswrite✖️
POST /user/codespaces/{codespace_name}/startwrite✖️
POST /user/codespaces/{codespace_name}/stopwrite✖️
GET /user/codespaces/{codespace_name}/exports/{export_id}read✖️

Repository permissions for "Codespaces metadata"

EndpointAccessAdditional permissions
GET /repos/{owner}/{repo}/codespaces/devcontainersread✖️
GET /repos/{owner}/{repo}/codespaces/machinesread✖️
GET /user/codespaces/{codespace_name}/machinesread✖️

Repository permissions for "Codespaces secrets"

EndpointAccessAdditional permissions
GET /repos/{owner}/{repo}/codespaces/secretswrite✖️
GET /repos/{owner}/{repo}/codespaces/secrets/public-keywrite✖️
GET /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write✖️
PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write
DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write

Repository permissions for "Codespaces"

EndpointAccessAdditional permissions
DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}write
POST /repos/{owner}/{repo}/codespaceswrite✖️
GET /repos/{owner}/{repo}/codespaces/newwrite✖️
GET /repos/{owner}/{repo}/codespaces/permissions_checkwrite✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/codespaceswrite✖️
POST /user/codespaceswrite✖️
PATCH /user/codespaces/{codespace_name}write✖️
DELETE /user/codespaces/{codespace_name}write✖️
POST /user/codespaces/{codespace_name}/publishwrite✖️
GET /orgs/{org}/codespacesread
GET /orgs/{org}/members/{username}/codespacesread
GET /repos/{owner}/{repo}/codespacesread✖️
GET /user/codespacesread✖️
GET /user/codespaces/{codespace_name}read✖️

Repository permissions for "Commit statuses"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/statuses/{sha}write✖️
GET /repos/{owner}/{repo}/commits/{ref}/statusread✖️
GET /repos/{owner}/{repo}/commits/{ref}/statusesread✖️

Repository permissions for "Contents"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/branches/{branch}/renamewrite✖️
PATCH /repos/{owner}/{repo}/comments/{comment_id}write✖️
DELETE /repos/{owner}/{repo}/comments/{comment_id}write✖️
POST /repos/{owner}/{repo}/comments/{comment_id}/reactionswrite✖️
DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}write✖️
PUT /repos/{owner}/{repo}/contents/{path}write✖️
DELETE /repos/{owner}/{repo}/contents/{path}write✖️
POST /repos/{owner}/{repo}/dependency-graph/snapshotswrite✖️
POST /repos/{owner}/{repo}/dispatcheswrite✖️
POST /repos/{owner}/{repo}/git/blobswrite✖️
POST /repos/{owner}/{repo}/git/commitswrite✖️
POST /repos/{owner}/{repo}/git/refswrite
PATCH /repos/{owner}/{repo}/git/refs/{ref}write
DELETE /repos/{owner}/{repo}/git/refs/{ref}write✖️
POST /repos/{owner}/{repo}/git/tagswrite✖️
POST /repos/{owner}/{repo}/git/treeswrite✖️
PUT /repos/{owner}/{repo}/importwrite✖️
PATCH /repos/{owner}/{repo}/importwrite✖️
DELETE /repos/{owner}/{repo}/importwrite✖️
PATCH /repos/{owner}/{repo}/import/authors/{author_id}write✖️
PATCH /repos/{owner}/{repo}/import/lfswrite✖️
POST /repos/{owner}/{repo}/merge-upstreamwrite✖️
POST /repos/{owner}/{repo}/mergeswrite✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/mergewrite✖️
POST /repos/{owner}/{repo}/releaseswrite
PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}write✖️
DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}write✖️
POST /repos/{owner}/{repo}/releases/generate-noteswrite✖️
PATCH /repos/{owner}/{repo}/releases/{release_id}write✖️
DELETE /repos/{owner}/{repo}/releases/{release_id}write✖️
GET /repos/{owner}/{repo}/activityread✖️
GET /repos/{owner}/{repo}/branchesread✖️
GET /repos/{owner}/{repo}/branches/{branch}read✖️
GET /repos/{owner}/{repo}/code-scanning/codeql/databasesread✖️
GET /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}read✖️
GET /repos/{owner}/{repo}/codeowners/errorsread✖️
GET /repos/{owner}/{repo}/commitsread✖️
GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-headread✖️
POST /repos/{owner}/{repo}/commits/{commit_sha}/commentsread✖️
GET /repos/{owner}/{repo}/commits/{ref}read✖️
GET /repos/{owner}/{repo}/community/profileread✖️
GET /repos/{owner}/{repo}/compare/{basehead}read✖️
GET /repos/{owner}/{repo}/contents/{path}read✖️
GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}read
GET /repos/{owner}/{repo}/dependency-graph/sbomread✖️
POST /repos/{owner}/{repo}/forksread
GET /repos/{owner}/{repo}/git/blobs/{file_sha}read✖️
GET /repos/{owner}/{repo}/git/commits/{commit_sha}read✖️
GET /repos/{owner}/{repo}/git/matching-refs/{ref}read✖️
GET /repos/{owner}/{repo}/git/ref/{ref}read✖️
GET /repos/{owner}/{repo}/git/tags/{tag_sha}read✖️
GET /repos/{owner}/{repo}/git/trees/{tree_sha}read✖️
GET /repos/{owner}/{repo}/importread✖️
GET /repos/{owner}/{repo}/import/authorsread✖️
GET /repos/{owner}/{repo}/import/large_filesread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}read
GET /repos/{owner}/{repo}/releasesread✖️
GET /repos/{owner}/{repo}/releases/assets/{asset_id}read✖️
GET /repos/{owner}/{repo}/releases/latestread✖️
GET /repos/{owner}/{repo}/releases/tags/{tag}read✖️
GET /repos/{owner}/{repo}/releases/{release_id}read✖️
GET /repos/{owner}/{repo}/releases/{release_id}/assetsread✖️
GET /repos/{owner}/{repo}/tarball/{ref}read✖️
GET /repos/{owner}/{repo}/zipball/{ref}read✖️

Repository permissions for "Dependabot alerts"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}write✖️
GET /orgs/{org}/dependabot/alertsread✖️
GET /repos/{owner}/{repo}/dependabot/alertsread✖️
GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number}read✖️

Repository permissions for "Dependabot secrets"

EndpointAccessAdditional permissions
PUT /repos/{owner}/{repo}/dependabot/secrets/{secret_name}write✖️
DELETE /repos/{owner}/{repo}/dependabot/secrets/{secret_name}write✖️
GET /repos/{owner}/{repo}/dependabot/secretsread✖️
GET /repos/{owner}/{repo}/dependabot/secrets/public-keyread✖️
GET /repos/{owner}/{repo}/dependabot/secrets/{secret_name}read✖️

Repository permissions for "Deployments"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/deploymentswrite✖️
DELETE /repos/{owner}/{repo}/deployments/{deployment_id}write✖️
POST /repos/{owner}/{repo}/deployments/{deployment_id}/statuseswrite✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread
GET /repos/{owner}/{repo}/deploymentsread✖️
GET /repos/{owner}/{repo}/deployments/{deployment_id}read✖️
GET /repos/{owner}/{repo}/deployments/{deployment_id}/statusesread✖️
GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses/{status_id}read✖️

Repository permissions for "Environments"

EndpointAccessAdditional permissions
PUT /repositories/{repository_id}/environments/{environment_name}/secrets/{secret_name}write
DELETE /repositories/{repository_id}/environments/{environment_name}/secrets/{secret_name}write
POST /repositories/{repository_id}/environments/{environment_name}/variableswrite
PATCH /repositories/{repository_id}/environments/{environment_name}/variables/{name}write
DELETE /repositories/{repository_id}/environments/{environment_name}/variables/{name}write
GET /repositories/{repository_id}/environments/{environment_name}/secretsread
GET /repositories/{repository_id}/environments/{environment_name}/secrets/public-keyread
GET /repositories/{repository_id}/environments/{environment_name}/secrets/{secret_name}read
GET /repositories/{repository_id}/environments/{environment_name}/variablesread
GET /repositories/{repository_id}/environments/{environment_name}/variables/{name}read

Repository permissions for "Issues"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/issueswrite✖️
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}write
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}write
POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactionswrite✖️
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}write✖️
PATCH /repos/{owner}/{repo}/issues/{issue_number}write
POST /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/commentswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
PUT /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}write
PUT /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
POST /repos/{owner}/{repo}/issues/{issue_number}/reactionswrite✖️
DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}write✖️
POST /repos/{owner}/{repo}/labelswrite
PATCH /repos/{owner}/{repo}/labels/{name}write
DELETE /repos/{owner}/{repo}/labels/{name}write
POST /repos/{owner}/{repo}/milestoneswrite
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}write
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}write
GET /repos/{owner}/{repo}/assigneesread
GET /repos/{owner}/{repo}/assignees/{assignee}read
GET /repos/{owner}/{repo}/issuesread✖️
GET /repos/{owner}/{repo}/issues/commentsread
GET /repos/{owner}/{repo}/issues/comments/{comment_id}read
GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactionsread✖️
GET /repos/{owner}/{repo}/issues/eventsread✖️
GET /repos/{owner}/{repo}/issues/events/{event_id}read
GET /repos/{owner}/{repo}/issues/{issue_number}read✖️
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}read
GET /repos/{owner}/{repo}/issues/{issue_number}/commentsread
GET /repos/{owner}/{repo}/issues/{issue_number}/eventsread
GET /repos/{owner}/{repo}/issues/{issue_number}/labelsread
GET /repos/{owner}/{repo}/issues/{issue_number}/reactionsread✖️
GET /repos/{owner}/{repo}/issues/{issue_number}/timelineread
GET /repos/{owner}/{repo}/labelsread
GET /repos/{owner}/{repo}/labels/{name}read
GET /repos/{owner}/{repo}/milestonesread
GET /repos/{owner}/{repo}/milestones/{milestone_number}read
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labelsread

Repository permissions for "Metadata"

EndpointAccessAdditional permissions
POST /gistsread
PATCH /gists/{gist_id}read
DELETE /gists/{gist_id}read
POST /gists/{gist_id}/commentsread
GET /gists/{gist_id}/comments/{comment_id}read✖️
PATCH /gists/{gist_id}/comments/{comment_id}read
DELETE /gists/{gist_id}/comments/{comment_id}read
POST /gists/{gist_id}/forksread
PUT /gists/{gist_id}/starread
DELETE /gists/{gist_id}/starread
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}read
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}read
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}read
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}read
PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}read
DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}read
PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}read
PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}read
DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}read
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}read
DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}read
GET /orgs/{org}/reposread✖️
GET /repos/{owner}/{repo}read✖️
GET /repos/{owner}/{repo}/collaboratorsread✖️
GET /repos/{owner}/{repo}/collaborators/{username}read✖️
GET /repos/{owner}/{repo}/collaborators/{username}/permissionread✖️
GET /repos/{owner}/{repo}/commentsread✖️
GET /repos/{owner}/{repo}/comments/{comment_id}read✖️
GET /repos/{owner}/{repo}/comments/{comment_id}/reactionsread✖️
GET /repos/{owner}/{repo}/commits/{commit_sha}/commentsread✖️
GET /repos/{owner}/{repo}/contributorsread✖️
GET /repos/{owner}/{repo}/eventsread✖️
GET /repos/{owner}/{repo}/forksread✖️
GET /repos/{owner}/{repo}/languagesread✖️
GET /repos/{owner}/{repo}/licenseread✖️
GET /repos/{owner}/{repo}/properties/valuesread✖️
GET /repos/{owner}/{repo}/rules/branches/{branch}read✖️
GET /repos/{owner}/{repo}/rulesetsread✖️
GET /repos/{owner}/{repo}/rulesets/{ruleset_id}read✖️
GET /repos/{owner}/{repo}/stargazersread✖️
GET /repos/{owner}/{repo}/stats/code_frequencyread✖️
GET /repos/{owner}/{repo}/stats/commit_activityread✖️
GET /repos/{owner}/{repo}/stats/contributorsread✖️
GET /repos/{owner}/{repo}/stats/participationread✖️
GET /repos/{owner}/{repo}/stats/punch_cardread✖️
GET /repos/{owner}/{repo}/subscribersread✖️
GET /repos/{owner}/{repo}/tagsread✖️
GET /repos/{owner}/{repo}/topicsread✖️
POST /repos/{template_owner}/{template_repo}/generateread✖️
GET /repositoriesread✖️
GET /search/labelsread✖️
PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}read
DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}read
GET /user/reposread✖️
GET /users/{username}/reposread✖️

Repository permissions for "Pages"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/pageswrite
PUT /repos/{owner}/{repo}/pageswrite
DELETE /repos/{owner}/{repo}/pageswrite
POST /repos/{owner}/{repo}/pages/buildswrite✖️
POST /repos/{owner}/{repo}/pages/deploymentwrite✖️
GET /repos/{owner}/{repo}/pages/healthwrite
GET /repos/{owner}/{repo}/pagesread✖️
GET /repos/{owner}/{repo}/pages/buildsread✖️
GET /repos/{owner}/{repo}/pages/builds/latestread✖️
GET /repos/{owner}/{repo}/pages/builds/{build_id}read✖️

Repository permissions for "Projects"

EndpointAccessAdditional permissions
PATCH /projects/columns/cards/{card_id}write
DELETE /projects/columns/cards/{card_id}write
POST /projects/columns/cards/{card_id}/moveswrite
PATCH /projects/columns/{column_id}write
DELETE /projects/columns/{column_id}write
POST /projects/columns/{column_id}/cardswrite
POST /projects/columns/{column_id}/moveswrite
PATCH /projects/{project_id}write
DELETE /projects/{project_id}write
GET /projects/{project_id}/collaboratorswrite
PUT /projects/{project_id}/collaborators/{username}write
DELETE /projects/{project_id}/collaborators/{username}write
GET /projects/{project_id}/collaborators/{username}/permissionwrite
POST /projects/{project_id}/columnswrite
POST /repos/{owner}/{repo}/projectswrite✖️
GET /projects/columns/cards/{card_id}read
GET /projects/columns/{column_id}read
GET /projects/columns/{column_id}/cardsread
GET /projects/{project_id}read
GET /projects/{project_id}/columnsread
GET /repos/{owner}/{repo}/projectsread✖️

Repository permissions for "Pull requests"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}write
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}write
PATCH /repos/{owner}/{repo}/issues/{issue_number}write
POST /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/commentswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
PUT /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}write
PUT /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
POST /repos/{owner}/{repo}/labelswrite
PATCH /repos/{owner}/{repo}/labels/{name}write
DELETE /repos/{owner}/{repo}/labels/{name}write
POST /repos/{owner}/{repo}/milestoneswrite
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}write
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}write
POST /repos/{owner}/{repo}/pullswrite✖️
PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}write✖️
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}write✖️
POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactionswrite✖️
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}write✖️
PATCH /repos/{owner}/{repo}/pulls/{pull_number}write✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/commentswrite✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replieswrite✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewerswrite✖️
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewerswrite✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviewswrite✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}write✖️
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}write✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissalswrite✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/eventswrite✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branchwrite✖️
GET /repos/{owner}/{repo}/assigneesread
GET /repos/{owner}/{repo}/assignees/{assignee}read
GET /repos/{owner}/{repo}/commits/{commit_sha}/pullsread✖️
GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}read
GET /repos/{owner}/{repo}/issues/commentsread
GET /repos/{owner}/{repo}/issues/comments/{comment_id}read
GET /repos/{owner}/{repo}/issues/events/{event_id}read
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}read
GET /repos/{owner}/{repo}/issues/{issue_number}/commentsread
GET /repos/{owner}/{repo}/issues/{issue_number}/eventsread
GET /repos/{owner}/{repo}/issues/{issue_number}/labelsread
GET /repos/{owner}/{repo}/issues/{issue_number}/timelineread
GET /repos/{owner}/{repo}/labelsread
GET /repos/{owner}/{repo}/labels/{name}read
GET /repos/{owner}/{repo}/milestonesread
GET /repos/{owner}/{repo}/milestones/{milestone_number}read
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labelsread
GET /repos/{owner}/{repo}/pullsread✖️
GET /repos/{owner}/{repo}/pulls/commentsread✖️
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}read✖️
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactionsread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}read
GET /repos/{owner}/{repo}/pulls/{pull_number}/commentsread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/commitsread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/filesread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/mergeread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewersread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviewsread✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}read✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/commentsread✖️

Repository permissions for "Repository security advisories"

EndpointAccessAdditional permissions
GET /orgs/{org}/security-advisorieswrite✖️
POST /repos/{owner}/{repo}/security-advisorieswrite✖️
POST /repos/{owner}/{repo}/security-advisories/reportswrite✖️
PATCH /repos/{owner}/{repo}/security-advisories/{ghsa_id}write✖️
POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/cvewrite✖️
GET /repos/{owner}/{repo}/security-advisoriesread✖️
GET /repos/{owner}/{repo}/security-advisories/{ghsa_id}read✖️
POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forksread

Repository permissions for "Secret scanning alerts"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}write✖️
GET /orgs/{org}/secret-scanning/alertsread✖️
GET /repos/{owner}/{repo}/secret-scanning/alertsread✖️
GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}read✖️
GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locationsread✖️

Repository permissions for "Secrets"

EndpointAccessAdditional permissions
PUT /repos/{owner}/{repo}/actions/secrets/{secret_name}write✖️
DELETE /repos/{owner}/{repo}/actions/secrets/{secret_name}write✖️
PUT /repositories/{repository_id}/environments/{environment_name}/secrets/{secret_name}write
DELETE /repositories/{repository_id}/environments/{environment_name}/secrets/{secret_name}write
GET /repos/{owner}/{repo}/actions/organization-secretsread✖️
GET /repos/{owner}/{repo}/actions/secretsread✖️
GET /repos/{owner}/{repo}/actions/secrets/public-keyread✖️
GET /repos/{owner}/{repo}/actions/secrets/{secret_name}read✖️
GET /repositories/{repository_id}/environments/{environment_name}/secretsread
GET /repositories/{repository_id}/environments/{environment_name}/secrets/public-keyread
GET /repositories/{repository_id}/environments/{environment_name}/secrets/{secret_name}read

Repository permissions for "Variables"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/actions/variableswrite✖️
PATCH /repos/{owner}/{repo}/actions/variables/{name}write✖️
DELETE /repos/{owner}/{repo}/actions/variables/{name}write✖️
POST /repositories/{repository_id}/environments/{environment_name}/variableswrite
PATCH /repositories/{repository_id}/environments/{environment_name}/variables/{name}write
DELETE /repositories/{repository_id}/environments/{environment_name}/variables/{name}write
GET /repos/{owner}/{repo}/actions/organization-variablesread✖️
GET /repos/{owner}/{repo}/actions/variablesread✖️
GET /repos/{owner}/{repo}/actions/variables/{name}read✖️
GET /repositories/{repository_id}/environments/{environment_name}/variablesread
GET /repositories/{repository_id}/environments/{environment_name}/variables/{name}read

Repository permissions for "Webhooks"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/hookswrite✖️
PATCH /repos/{owner}/{repo}/hooks/{hook_id}write✖️
DELETE /repos/{owner}/{repo}/hooks/{hook_id}write✖️
PATCH /repos/{owner}/{repo}/hooks/{hook_id}/configwrite✖️
POST /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}/attemptswrite✖️
GET /repos/{owner}/{repo}/hooksread✖️
GET /repos/{owner}/{repo}/hooks/{hook_id}read✖️
GET /repos/{owner}/{repo}/hooks/{hook_id}/configread✖️
GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveriesread✖️
GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}read✖️
POST /repos/{owner}/{repo}/hooks/{hook_id}/pingsread✖️
POST /repos/{owner}/{repo}/hooks/{hook_id}/testsread✖️

Repository permissions for "Workflows"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/git/refswrite
PATCH /repos/{owner}/{repo}/git/refs/{ref}write
POST /repos/{owner}/{repo}/releaseswrite

User permissions for "Block another user"

EndpointAccessAdditional permissions
PUT /user/blocks/{username}write✖️
DELETE /user/blocks/{username}write✖️
GET /user/blocksread✖️
GET /user/blocks/{username}read✖️

User permissions for "Codespaces user secrets"

EndpointAccessAdditional permissions
PUT /user/codespaces/secrets/{secret_name}write✖️
DELETE /user/codespaces/secrets/{secret_name}write✖️
PUT /user/codespaces/secrets/{secret_name}/repositorieswrite✖️
PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}write
DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}write
GET /user/codespaces/secretsread✖️
GET /user/codespaces/secrets/public-keyread✖️
GET /user/codespaces/secrets/{secret_name}read✖️
GET /user/codespaces/secrets/{secret_name}/repositoriesread✖️

User permissions for "Email addresses"

EndpointAccessAdditional permissions
PATCH /user/email/visibilitywrite✖️
POST /user/emailswrite✖️
DELETE /user/emailswrite✖️
GET /user/emailsread✖️
GET /user/public_emailsread✖️

User permissions for "Followers"

EndpointAccessAdditional permissions
PUT /user/following/{username}write✖️
DELETE /user/following/{username}write✖️
GET /user/followersread✖️
GET /user/followingread✖️
GET /user/following/{username}read✖️

User permissions for "GPG keys"

EndpointAccessAdditional permissions
POST /user/gpg_keyswrite✖️
DELETE /user/gpg_keys/{gpg_key_id}write✖️
GET /user/gpg_keysread✖️
GET /user/gpg_keys/{gpg_key_id}read✖️

User permissions for "Gists"

EndpointAccessAdditional permissions
POST /gistswrite
PATCH /gists/{gist_id}write
DELETE /gists/{gist_id}write
POST /gists/{gist_id}/commentswrite
PATCH /gists/{gist_id}/comments/{comment_id}write
DELETE /gists/{gist_id}/comments/{comment_id}write
POST /gists/{gist_id}/forkswrite
PUT /gists/{gist_id}/starwrite
DELETE /gists/{gist_id}/starwrite

User permissions for "Git SSH keys"

EndpointAccessAdditional permissions
POST /user/keyswrite✖️
DELETE /user/keys/{key_id}write✖️
GET /user/keysread✖️
GET /user/keys/{key_id}read✖️
GET /users/{username}/keysread✖️

User permissions for "Interaction limits"

EndpointAccessAdditional permissions
PUT /user/interaction-limitswrite✖️
DELETE /user/interaction-limitswrite✖️
GET /user/interaction-limitsread✖️

User permissions for "Plan"

EndpointAccessAdditional permissions
GET /users/{username}/settings/billing/actionsread✖️
GET /users/{username}/settings/billing/packagesread✖️
GET /users/{username}/settings/billing/shared-storageread✖️

User permissions for "Profile"

EndpointAccessAdditional permissions
PATCH /userwrite✖️
POST /user/social_accountswrite✖️
DELETE /user/social_accountswrite✖️

User permissions for "SSH signing keys"

EndpointAccessAdditional permissions
POST /user/ssh_signing_keyswrite✖️
DELETE /user/ssh_signing_keys/{ssh_signing_key_id}write✖️
GET /user/ssh_signing_keysread✖️
GET /user/ssh_signing_keys/{ssh_signing_key_id}read✖️

User permissions for "Starring"

EndpointAccessAdditional permissions
PUT /user/starred/{owner}/{repo}write✖️
DELETE /user/starred/{owner}/{repo}write✖️
GET /user/starredread✖️
GET /user/starred/{owner}/{repo}read✖️
GET /users/{username}/starredread✖️

User permissions for "Watching"

EndpointAccessAdditional permissions
GET /user/subscriptionsread✖️
GET /users/{username}/subscriptionsread✖️