Permissions required for GitHub Apps

About GitHub App permissions

GitHub Apps are created with a set of permissions. Permissions define what resources the GitHub App can access via the API. For more information, see "Choosing permissions for a GitHub App."

Actions

• GET /repos/{owner}/{repo}/actions/artifacts (read)

• GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id} (read)

• DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id} (write)

• GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format} (read)

• GET /repos/{owner}/{repo}/actions/jobs/{job_id} (read)

• GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logs (read)

• GET /repos/{owner}/{repo}/actions/runs (read)

• GET /repos/{owner}/{repo}/actions/runs/{run_id} (read)

• DELETE /repos/{owner}/{repo}/actions/runs/{run_id} (write)

• GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifacts (read)

• POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancel (write)

• GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobs (read)

• GET /repos/{owner}/{repo}/actions/runs/{run_id}/logs (read)

• DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logs (write)

• POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun (write)

• GET /repos/{owner}/{repo}/actions/workflows (read)

• GET /repos/{owner}/{repo}/actions/workflows/{workflow_id} (read)

• PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disable (write)

• POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches (write)

• PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enable (write)

• GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runs (read)

• GET /repos/{owner}/{repo}/environments (read)

• GET /repos/{owner}/{repo}/environments/{environment_name} (read)

• GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies (read)

• GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id} (read)

• GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number} (read)
• GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs (read)
• GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logs (read)

• GET /repos/{owner}/{repo}/actions/runs/{run_id}/timing (read)
• GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/timing (read)

Administration

• POST /orgs/{org}/repos (write)
• PATCH /repos/{owner}/{repo} (write)
• DELETE /repos/{owner}/{repo} (write)
• GET /repos/{owner}/{repo}/actions/permissions (read)
• PUT /repos/{owner}/{repo}/actions/permissions (write)
• GET /repos/{owner}/{repo}/actions/permissions/selected-actions (read)
• PUT /repos/{owner}/{repo}/actions/permissions/selected-actions (write)
• GET /repos/{owner}/{repo}/actions/runners (read)
• GET /repos/{owner}/{repo}/actions/runners/downloads (read)
• POST /repos/{owner}/{repo}/actions/runners/registration-token (write)
• POST /repos/{owner}/{repo}/actions/runners/remove-token (write)
• GET /repos/{owner}/{repo}/actions/runners/{runner_id} (read)
• DELETE /repos/{owner}/{repo}/actions/runners/{runner_id} (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection (read)
• PUT /repos/{owner}/{repo}/branches/{branch}/protection (write)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins (read)
• POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins (write)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_admins (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews (read)
• PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews (write)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviews (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures (read)
• POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures (write)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatures (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks (read)
• PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks (write)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts (read)
• POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts (write)
• PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts (write)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contexts (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions (read)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps (read)
• POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps (write)
• PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps (write)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/apps (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams (read)
• POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams (write)
• PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams (write)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teams (write)
• GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users (read)
• POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users (write)
• PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users (write)
• DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/users (write)
• PUT /repos/{owner}/{repo}/collaborators/{username} (write)
• DELETE /repos/{owner}/{repo}/collaborators/{username} (write)
• PUT /repos/{owner}/{repo}/environments/{environment_name} (write)
• DELETE /repos/{owner}/{repo}/environments/{environment_name} (write)
• POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies (write)
• PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id} (write)
• DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id} (write)
• POST /repos/{owner}/{repo}/forks (write)
• GET /repos/{owner}/{repo}/invitations (read)
• PATCH /repos/{owner}/{repo}/invitations/{invitation_id} (write)
• DELETE /repos/{owner}/{repo}/invitations/{invitation_id} (write)
• GET /repos/{owner}/{repo}/keys (read)
• POST /repos/{owner}/{repo}/keys (write)
• GET /repos/{owner}/{repo}/keys/{key_id} (read)
• DELETE /repos/{owner}/{repo}/keys/{key_id} (write)
• POST /repos/{owner}/{repo}/pages (write)
• PUT /repos/{owner}/{repo}/pages (write)
• DELETE /repos/{owner}/{repo}/pages (write)
• GET /repos/{owner}/{repo}/teams (read)
• PUT /repos/{owner}/{repo}/topics (write)
• POST /repos/{owner}/{repo}/transfer (write)
• POST /user/repos (write)
• GET /user/repository_invitations (read)
• PATCH /user/repository_invitations/{invitation_id} (write)
• DELETE /user/repository_invitations/{invitation_id} (write)
• GET /repos/{owner}/{repo}/autolinks (read)
• POST /repos/{owner}/{repo}/autolinks (write)
• GET /repos/{owner}/{repo}/autolinks/{autolink_id} (read)
• DELETE /repos/{owner}/{repo}/autolinks/{autolink_id} (write)

Checks

• POST /repos/{owner}/{repo}/check-runs (write)
• GET /repos/{owner}/{repo}/check-runs/{check_run_id} (read)
• PATCH /repos/{owner}/{repo}/check-runs/{check_run_id} (write)
• GET /repos/{owner}/{repo}/check-runs/{check_run_id}/annotations (read)
• POST /repos/{owner}/{repo}/check-suites (write)
• PATCH /repos/{owner}/{repo}/check-suites/preferences (write)
• GET /repos/{owner}/{repo}/check-suites/{check_suite_id} (read)
• GET /repos/{owner}/{repo}/check-suites/{check_suite_id}/check-runs (read)
• POST /repos/{owner}/{repo}/check-suites/{check_suite_id}/rerequest (write)
• GET /repos/{owner}/{repo}/commits/{ref}/check-runs (read)
• GET /repos/{owner}/{repo}/commits/{ref}/check-suites (read)
• POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequest (write)

Contents

• GET /repos/{owner}/{repo}/codeowners/errors (read)

• GET /repos/{owner}/{repo}/branches (read)

• GET /repos/{owner}/{repo}/branches/{branch} (read)

• PATCH /repos/{owner}/{repo}/comments/{comment_id} (write)

• DELETE /repos/{owner}/{repo}/comments/{comment_id} (write)

• POST /repos/{owner}/{repo}/comments/{comment_id}/reactions (write)

• DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id} (write)

• GET /repos/{owner}/{repo}/commits (read)

• GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-head (read)

• POST /repos/{owner}/{repo}/commits/{commit_sha}/comments (read)

• GET /repos/{owner}/{repo}/commits/{ref} (read)

• GET /repos/{owner}/{repo}/compare/{basehead} (read)

• GET /repos/{owner}/{repo}/contents/{path} (read)

• PUT /repos/{owner}/{repo}/contents/{path} (write)

• DELETE /repos/{owner}/{repo}/contents/{path} (write)

• POST /repos/{owner}/{repo}/dispatches (write)

• POST /repos/{owner}/{repo}/git/blobs (write)

• GET /repos/{owner}/{repo}/git/blobs/{file_sha} (read)

• POST /repos/{owner}/{repo}/git/commits (write)

• GET /repos/{owner}/{repo}/git/commits/{commit_sha} (read)

• GET /repos/{owner}/{repo}/git/matching-refs/{ref} (read)

• GET /repos/{owner}/{repo}/git/ref/{ref} (read)

• POST /repos/{owner}/{repo}/git/refs (write)

• PATCH /repos/{owner}/{repo}/git/refs/{ref} (write)

• DELETE /repos/{owner}/{repo}/git/refs/{ref} (write)

• POST /repos/{owner}/{repo}/git/tags (write)

• GET /repos/{owner}/{repo}/git/tags/{tag_sha} (read)

• POST /repos/{owner}/{repo}/git/trees (write)

• GET /repos/{owner}/{repo}/git/trees/{tree_sha} (read)

• POST /repos/{owner}/{repo}/merges (write)

• GET /repos/{owner}/{repo}/pulls/{pull_number} (read)

• PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge (write)

• GET /repos/{owner}/{repo}/releases (read)

• POST /repos/{owner}/{repo}/releases (write)

• GET /repos/{owner}/{repo}/releases/assets/{asset_id} (read)

• PATCH /repos/{owner}/{repo}/releases/assets/{asset_id} (write)

• DELETE /repos/{owner}/{repo}/releases/assets/{asset_id} (write)

• GET /repos/{owner}/{repo}/releases/latest (read)

• GET /repos/{owner}/{repo}/releases/tags/{tag} (read)

• GET /repos/{owner}/{repo}/releases/{release_id} (read)

• PATCH /repos/{owner}/{repo}/releases/{release_id} (write)

• DELETE /repos/{owner}/{repo}/releases/{release_id} (write)

• GET /repos/{owner}/{repo}/releases/{release_id}/assets (read)

• POST /repos/{owner}/{repo}/merge-upstream (write)

• GET /repos/{owner}/{repo}/codeowners/errors (read)

Deployments

• GET /repos/{owner}/{repo}/deployments (read)
• POST /repos/{owner}/{repo}/deployments (write)
• GET /repos/{owner}/{repo}/deployments/{deployment_id} (read)
• DELETE /repos/{owner}/{repo}/deployments/{deployment_id} (write)
• GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses (read)
• POST /repos/{owner}/{repo}/deployments/{deployment_id}/statuses (write)
• GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses/{status_id} (read)

Followers

• GET /user/followers (read)
• GET /user/following (read)
• GET /user/following/{username} (read)
• PUT /user/following/{username} (write)
• DELETE /user/following/{username} (write)

Gists

• POST /gists (write)
• PATCH /gists/{gist_id} (write)
• DELETE /gists/{gist_id} (write)
• POST /gists/{gist_id}/comments (write)
• PATCH /gists/{gist_id}/comments/{comment_id} (write)
• DELETE /gists/{gist_id}/comments/{comment_id} (write)
• POST /gists/{gist_id}/forks (write)
• PUT /gists/{gist_id}/star (write)
• DELETE /gists/{gist_id}/star (write)

Gpg keys

• GET /user/gpg_keys (read)
• POST /user/gpg_keys (write)
• GET /user/gpg_keys/{gpg_key_id} (read)
• DELETE /user/gpg_keys/{gpg_key_id} (write)

Issues

• GET /repos/{owner}/{repo}/assignees (read)
• GET /repos/{owner}/{repo}/assignees/{assignee} (read)
• GET /repos/{owner}/{repo}/issues (read)
• POST /repos/{owner}/{repo}/issues (write)
• GET /repos/{owner}/{repo}/issues/comments (read)
• GET /repos/{owner}/{repo}/issues/comments/{comment_id} (read)
• PATCH /repos/{owner}/{repo}/issues/comments/{comment_id} (write)
• DELETE /repos/{owner}/{repo}/issues/comments/{comment_id} (write)
• GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions (read)
• POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions (write)
• DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id} (write)
• GET /repos/{owner}/{repo}/issues/events (read)
• GET /repos/{owner}/{repo}/issues/events/{event_id} (read)
• GET /repos/{owner}/{repo}/issues/{issue_number} (read)
• PATCH /repos/{owner}/{repo}/issues/{issue_number} (write)
• POST /repos/{owner}/{repo}/issues/{issue_number}/assignees (write)
• DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees (write)
• GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee} (read)
• GET /repos/{owner}/{repo}/issues/{issue_number}/comments (read)
• POST /repos/{owner}/{repo}/issues/{issue_number}/comments (write)
• GET /repos/{owner}/{repo}/issues/{issue_number}/events (read)
• GET /repos/{owner}/{repo}/issues/{issue_number}/labels (read)
• POST /repos/{owner}/{repo}/issues/{issue_number}/labels (write)
• PUT /repos/{owner}/{repo}/issues/{issue_number}/labels (write)
• DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels (write)
• DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name} (write)
• PUT /repos/{owner}/{repo}/issues/{issue_number}/lock (write)
• DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock (write)
• GET /repos/{owner}/{repo}/issues/{issue_number}/reactions (read)
• POST /repos/{owner}/{repo}/issues/{issue_number}/reactions (write)
• DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id} (write)
• GET /repos/{owner}/{repo}/issues/{issue_number}/timeline (read)
• GET /repos/{owner}/{repo}/labels (read)
• POST /repos/{owner}/{repo}/labels (write)
• GET /repos/{owner}/{repo}/labels/{name} (read)
• PATCH /repos/{owner}/{repo}/labels/{name} (write)
• DELETE /repos/{owner}/{repo}/labels/{name} (write)
• GET /repos/{owner}/{repo}/milestones (read)
• POST /repos/{owner}/{repo}/milestones (write)
• GET /repos/{owner}/{repo}/milestones/{milestone_number} (read)
• PATCH /repos/{owner}/{repo}/milestones/{milestone_number} (write)
• DELETE /repos/{owner}/{repo}/milestones/{milestone_number} (write)
• GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels (read)

Keys

• GET /user/keys (read)
• POST /user/keys (write)
• GET /user/keys/{key_id} (read)
• DELETE /user/keys/{key_id} (write)

Members

• GET /orgs/{org}/members (read)
• GET /orgs/{org}/members/{username} (read)
• DELETE /orgs/{org}/members/{username} (write)
• GET /orgs/{org}/memberships/{username} (read)
• PUT /orgs/{org}/memberships/{username} (write)
• DELETE /orgs/{org}/memberships/{username} (write)
• GET /orgs/{org}/outside_collaborators (read)
• PUT /orgs/{org}/outside_collaborators/{username} (write)
• DELETE /orgs/{org}/outside_collaborators/{username} (write)

• GET /orgs/{org}/teams (read)

• POST /orgs/{org}/teams (write)

• GET /teams/{team_id}/members/{username} (read)

• PUT /teams/{team_id}/members/{username} (write)

• DELETE /teams/{team_id}/members/{username} (write)

• GET /user/memberships/orgs/{org} (read)

• PATCH /user/memberships/orgs/{org} (write)

• GET /orgs/{org}/external-group/{group_id} (write)

• GET /orgs/{org}/external-groups (write)

• PATCH /orgs/{org}/teams/{team_slug}/external-groups (write)

• DELETE /orgs/{org}/teams/{team_slug}/external-groups (write)

Metadata

• POST /gists (read)

• PATCH /gists/{gist_id} (read)

• DELETE /gists/{gist_id} (read)

• POST /gists/{gist_id}/comments (read)

• GET /gists/{gist_id}/comments/{comment_id} (read)

• PATCH /gists/{gist_id}/comments/{comment_id} (read)

• DELETE /gists/{gist_id}/comments/{comment_id} (read)

• POST /gists/{gist_id}/forks (read)

• PUT /gists/{gist_id}/star (read)

• DELETE /gists/{gist_id}/star (read)

• GET /notifications (read)

• PUT /orgs/{org}/actions/permissions/repositories/{repository_id} (read)

• DELETE /orgs/{org}/actions/permissions/repositories/{repository_id} (read)

• PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id} (read)

• DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id} (read)

• GET /orgs/{org}/repos (read)

• GET /repos/{owner}/{repo} (read)

• GET /repos/{owner}/{repo}/collaborators (read)

• GET /repos/{owner}/{repo}/collaborators/{username} (read)

• GET /repos/{owner}/{repo}/collaborators/{username}/permission (read)

• GET /repos/{owner}/{repo}/comments (read)

• GET /repos/{owner}/{repo}/comments/{comment_id} (read)

• GET /repos/{owner}/{repo}/comments/{comment_id}/reactions (read)

• GET /repos/{owner}/{repo}/commits/{commit_sha}/comments (read)

• GET /repos/{owner}/{repo}/contributors (read)

• GET /repos/{owner}/{repo}/events (read)

• GET /repos/{owner}/{repo}/forks (read)

• GET /repos/{owner}/{repo}/languages (read)

• GET /repos/{owner}/{repo}/license (read)

• GET /repos/{owner}/{repo}/stargazers (read)

• GET /repos/{owner}/{repo}/stats/code_frequency (read)

• GET /repos/{owner}/{repo}/stats/commit_activity (read)

• GET /repos/{owner}/{repo}/stats/contributors (read)

• GET /repos/{owner}/{repo}/stats/participation (read)

• GET /repos/{owner}/{repo}/stats/punch_card (read)

• GET /repos/{owner}/{repo}/subscribers (read)

• GET /repos/{owner}/{repo}/tags (read)

• GET /repos/{owner}/{repo}/topics (read)

• POST /repos/{template_owner}/{template_repo}/generate (read)

• GET /search/labels (read)

• GET /user/repos (read)

• GET /users/{username}/repos (read)

Notifications

• GET /notifications (read)

Organization administration

• PATCH /orgs/{org} (write)
• GET /orgs/{org}/actions/permissions (read)
• PUT /orgs/{org}/actions/permissions (write)
• GET /orgs/{org}/actions/permissions/repositories (read)
• PUT /orgs/{org}/actions/permissions/repositories (write)
• PUT /orgs/{org}/actions/permissions/repositories/{repository_id} (write)
• DELETE /orgs/{org}/actions/permissions/repositories/{repository_id} (write)
• GET /orgs/{org}/actions/permissions/selected-actions (read)
• PUT /orgs/{org}/actions/permissions/selected-actions (write)
• GET /orgs/{org}/installations (read)
• GET /orgs/{org}/audit-log (read)

Organization events

• GET /users/{username}/events/orgs/{org} (read)

Organization hooks

• GET /orgs/{org}/hooks (read)
• POST /orgs/{org}/hooks (write)
• GET /orgs/{org}/hooks/{hook_id} (read)
• PATCH /orgs/{org}/hooks/{hook_id} (write)
• DELETE /orgs/{org}/hooks/{hook_id} (write)
• GET /orgs/{org}/hooks/{hook_id}/config (read)
• PATCH /orgs/{org}/hooks/{hook_id}/config (write)
• GET /orgs/{org}/hooks/{hook_id}/deliveries (read)
• GET /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id} (read)
• POST /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}/attempts (write)
• POST /orgs/{org}/hooks/{hook_id}/pings (write)

Organization projects

• GET /orgs/{org}/projects (read)
• POST /orgs/{org}/projects (write)
• GET /projects/columns/cards/{card_id} (read)
• PATCH /projects/columns/cards/{card_id} (write)
• DELETE /projects/columns/cards/{card_id} (write)
• POST /projects/columns/cards/{card_id}/moves (write)
• GET /projects/columns/{column_id} (read)
• PATCH /projects/columns/{column_id} (write)
• DELETE /projects/columns/{column_id} (write)
• GET /projects/columns/{column_id}/cards (read)
• POST /projects/columns/{column_id}/cards (write)
• POST /projects/columns/{column_id}/moves (write)
• GET /projects/{project_id} (read)
• PATCH /projects/{project_id} (write)
• DELETE /projects/{project_id} (write)
• GET /projects/{project_id}/collaborators (admin)
• PUT /projects/{project_id}/collaborators/{username} (admin)
• DELETE /projects/{project_id}/collaborators/{username} (admin)
• GET /projects/{project_id}/collaborators/{username}/permission (admin)
• GET /projects/{project_id}/columns (read)
• POST /projects/{project_id}/columns (write)

Organization secrets

• GET /orgs/{org}/actions/secrets (read)
• GET /orgs/{org}/actions/secrets/public-key (read)
• GET /orgs/{org}/actions/secrets/{secret_name} (read)
• PUT /orgs/{org}/actions/secrets/{secret_name} (write)
• DELETE /orgs/{org}/actions/secrets/{secret_name} (write)
• GET /orgs/{org}/actions/secrets/{secret_name}/repositories (read)
• PUT /orgs/{org}/actions/secrets/{secret_name}/repositories (write)
• PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id} (write)
• DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id} (write)

Organization self hosted runners

• GET /orgs/{org}/actions/runner-groups (read)
• POST /orgs/{org}/actions/runner-groups (write)
• GET /orgs/{org}/actions/runner-groups/{runner_group_id} (read)
• PATCH /orgs/{org}/actions/runner-groups/{runner_group_id} (write)
• DELETE /orgs/{org}/actions/runner-groups/{runner_group_id} (write)

• PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id} (write)

• GET /orgs/{org}/actions/runners (read)

• GET /orgs/{org}/actions/runners/downloads (read)

• POST /orgs/{org}/actions/runners/registration-token (write)

• POST /orgs/{org}/actions/runners/remove-token (write)

• GET /orgs/{org}/actions/runners/{runner_id} (read)

• DELETE /orgs/{org}/actions/runners/{runner_id} (write)

Pages

• GET /repos/{owner}/{repo}/pages (read)
• POST /repos/{owner}/{repo}/pages (write)
• PUT /repos/{owner}/{repo}/pages (write)
• DELETE /repos/{owner}/{repo}/pages (write)
• GET /repos/{owner}/{repo}/pages/builds (read)
• POST /repos/{owner}/{repo}/pages/builds (write)
• GET /repos/{owner}/{repo}/pages/builds/latest (read)
• GET /repos/{owner}/{repo}/pages/builds/{build_id} (read)

Profile

• PATCH /user (write)

Pull requests

• GET /repos/{owner}/{repo}/assignees (read)
• GET /repos/{owner}/{repo}/assignees/{assignee} (read)
• GET /repos/{owner}/{repo}/commits/{commit_sha}/pulls (read)
• GET /repos/{owner}/{repo}/issues/comments (read)
• GET /repos/{owner}/{repo}/issues/comments/{comment_id} (read)
• PATCH /repos/{owner}/{repo}/issues/comments/{comment_id} (write)
• DELETE /repos/{owner}/{repo}/issues/comments/{comment_id} (write)
• GET /repos/{owner}/{repo}/issues/events/{event_id} (read)
• PATCH /repos/{owner}/{repo}/issues/{issue_number} (write)
• POST /repos/{owner}/{repo}/issues/{issue_number}/assignees (write)
• DELETE /repos/{owner}/{repo}/issues/{issue_number}/assignees (write)
• GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee} (read)
• GET /repos/{owner}/{repo}/issues/{issue_number}/comments (read)
• POST /repos/{owner}/{repo}/issues/{issue_number}/comments (write)
• GET /repos/{owner}/{repo}/issues/{issue_number}/events (read)
• GET /repos/{owner}/{repo}/issues/{issue_number}/labels (read)
• POST /repos/{owner}/{repo}/issues/{issue_number}/labels (write)
• PUT /repos/{owner}/{repo}/issues/{issue_number}/labels (write)
• DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels (write)
• DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name} (write)
• PUT /repos/{owner}/{repo}/issues/{issue_number}/lock (write)
• DELETE /repos/{owner}/{repo}/issues/{issue_number}/lock (write)
• GET /repos/{owner}/{repo}/issues/{issue_number}/timeline (read)
• GET /repos/{owner}/{repo}/labels (read)
• POST /repos/{owner}/{repo}/labels (write)
• GET /repos/{owner}/{repo}/labels/{name} (read)
• PATCH /repos/{owner}/{repo}/labels/{name} (write)
• DELETE /repos/{owner}/{repo}/labels/{name} (write)
• GET /repos/{owner}/{repo}/milestones (read)
• POST /repos/{owner}/{repo}/milestones (write)
• GET /repos/{owner}/{repo}/milestones/{milestone_number} (read)
• PATCH /repos/{owner}/{repo}/milestones/{milestone_number} (write)
• DELETE /repos/{owner}/{repo}/milestones/{milestone_number} (write)
• GET /repos/{owner}/{repo}/milestones/{milestone_number}/labels (read)
• GET /repos/{owner}/{repo}/pulls (read)
• POST /repos/{owner}/{repo}/pulls (write)
• GET /repos/{owner}/{repo}/pulls/comments (read)
• GET /repos/{owner}/{repo}/pulls/comments/{comment_id} (read)
• PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id} (write)
• DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id} (write)
• GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions (read)
• POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions (write)
• DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id} (write)
• GET /repos/{owner}/{repo}/pulls/{pull_number} (read)
• PATCH /repos/{owner}/{repo}/pulls/{pull_number} (write)
• GET /repos/{owner}/{repo}/pulls/{pull_number}/comments (read)
• POST /repos/{owner}/{repo}/pulls/{pull_number}/comments (write)
• POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replies (write)
• GET /repos/{owner}/{repo}/pulls/{pull_number}/commits (read)
• GET /repos/{owner}/{repo}/pulls/{pull_number}/files (read)
• GET /repos/{owner}/{repo}/pulls/{pull_number}/merge (read)
• GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers (read)
• POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers (write)
• DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers (write)
• GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews (read)
• POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews (write)
• GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id} (read)
• PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id} (write)
• DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id} (write)
• GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/comments (read)
• PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissals (write)
• POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/events (write)
• PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branch (write)

Repository hooks

• GET /repos/{owner}/{repo}/hooks (read)
• POST /repos/{owner}/{repo}/hooks (write)
• GET /repos/{owner}/{repo}/hooks/{hook_id} (read)
• PATCH /repos/{owner}/{repo}/hooks/{hook_id} (write)
• DELETE /repos/{owner}/{repo}/hooks/{hook_id} (write)
• GET /repos/{owner}/{repo}/hooks/{hook_id}/config (read)
• PATCH /repos/{owner}/{repo}/hooks/{hook_id}/config (write)
• GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries (read)
• GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id} (read)
• POST /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}/attempts (write)
• POST /repos/{owner}/{repo}/hooks/{hook_id}/pings (read)
• POST /repos/{owner}/{repo}/hooks/{hook_id}/tests (read)

Repository projects

• GET /projects/columns/cards/{card_id} (read)
• PATCH /projects/columns/cards/{card_id} (write)
• DELETE /projects/columns/cards/{card_id} (write)
• POST /projects/columns/cards/{card_id}/moves (write)
• GET /projects/columns/{column_id} (read)
• PATCH /projects/columns/{column_id} (write)
• DELETE /projects/columns/{column_id} (write)
• GET /projects/columns/{column_id}/cards (read)
• POST /projects/columns/{column_id}/cards (write)
• POST /projects/columns/{column_id}/moves (write)
• GET /projects/{project_id} (read)
• PATCH /projects/{project_id} (write)
• DELETE /projects/{project_id} (write)
• GET /projects/{project_id}/collaborators (write)
• PUT /projects/{project_id}/collaborators/{username} (write)
• DELETE /projects/{project_id}/collaborators/{username} (write)
• GET /projects/{project_id}/collaborators/{username}/permission (write)
• GET /projects/{project_id}/columns (read)
• POST /projects/{project_id}/columns (write)
• GET /repos/{owner}/{repo}/projects (read)
• POST /repos/{owner}/{repo}/projects (write)

Secret scanning alerts

• GET /repos/{owner}/{repo}/secret-scanning/alerts (read)

• GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number} (read)

• PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number} (write)

• GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locations (read)

Secrets

• GET /repos/{owner}/{repo}/actions/secrets (read)
• GET /repos/{owner}/{repo}/actions/secrets/public-key (read)
• GET /repos/{owner}/{repo}/actions/secrets/{secret_name} (read)
• PUT /repos/{owner}/{repo}/actions/secrets/{secret_name} (write)
• DELETE /repos/{owner}/{repo}/actions/secrets/{secret_name} (write)

Security events

• GET /repos/{owner}/{repo}/code-scanning/alerts (read)
• GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number} (read)
• PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number} (write)
• GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instances (read)
• GET /repos/{owner}/{repo}/code-scanning/analyses (read)
• GET /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id} (read)
• DELETE /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id} (write)
• POST /repos/{owner}/{repo}/code-scanning/sarifs (write)
• GET /repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id} (read)
• GET /orgs/{org}/code-scanning/alerts (read)

Starring

• GET /user/starred (read)
• GET /user/starred/{owner}/{repo} (read)
• PUT /user/starred/{owner}/{repo} (write)
• DELETE /user/starred/{owner}/{repo} (write)
• GET /users/{username}/starred (read)

Statuses

• GET /repos/{owner}/{repo}/commits/{ref}/status (read)
• GET /repos/{owner}/{repo}/commits/{ref}/statuses (read)
• POST /repos/{owner}/{repo}/statuses/{sha} (write)

Team discussions

• DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions/{reaction_id} (write)
• DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions/{reaction_id} (write)

Watching

• GET /user/subscriptions (read)
• GET /users/{username}/subscriptions (read)

Workflows

• POST /repos/{owner}/{repo}/git/refs (write)
• PATCH /repos/{owner}/{repo}/git/refs/{ref} (write)