Skip to main content

Permissions required for GitHub Apps

In this article

These are the permissions required for a GitHub App to use each REST API endpoint that works with GitHub Apps.

About GitHub App permissions

GitHub Apps are created with a set of permissions. Permissions define what resources the GitHub App can access via the API. For more information, see "Choosing permissions for a GitHub App."

To help you choose the correct permissions, you will receive the X-Accepted-GitHub-Permissions header in the REST API response. The header will tell you what permissions are required in order to access the endpoint. For more information, see "Troubleshooting."

Some endpoints require additional permissions. When this is the case, the "Additional permissions" column will indicate the other permissions that are required to use the endpoint.

Organization permissions for "Administration"

EndpointAccessToken typesAdditional permissions
PATCH /orgs/{org}writeUAT
IAT
✖️
DELETE /orgs/{org}writeUAT
IAT
✖️
PUT /orgs/{org}/actions/oidc/customization/subwriteUAT
IAT
✖️
PUT /orgs/{org}/actions/permissionswriteUAT
IAT
✖️
PUT /orgs/{org}/actions/permissions/repositorieswriteUAT
IAT
✖️
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}writeUAT
IAT
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}writeUAT
IAT
PUT /orgs/{org}/actions/permissions/selected-actionswriteUAT
IAT
✖️
PUT /orgs/{org}/actions/permissions/workflowwriteUAT
IAT
✖️
PUT /orgs/{org}/interaction-limitswriteUAT
IAT
✖️
DELETE /orgs/{org}/interaction-limitswriteUAT
IAT
✖️
GET /orgs/{org}/rulesetswriteUAT
IAT
✖️
POST /orgs/{org}/rulesetswriteUAT
IAT
✖️
GET /orgs/{org}/rulesets/{ruleset_id}writeUAT
IAT
✖️
PUT /orgs/{org}/rulesets/{ruleset_id}writeUAT
IAT
✖️
DELETE /orgs/{org}/rulesets/{ruleset_id}writeUAT
IAT
✖️
PUT /orgs/{org}/security-managers/teams/{team_slug}writeUAT
IAT
✖️
DELETE /orgs/{org}/security-managers/teams/{team_slug}writeUAT
IAT
✖️
POST /orgs/{org}/{security_product}/{enablement}writeUAT
IAT
✖️
GET /orgs/{org}/actions/cache/usagereadUAT
IAT
✖️
GET /orgs/{org}/actions/cache/usage-by-repositoryreadUAT
IAT
✖️
GET /orgs/{org}/actions/oidc/customization/subreadUAT
IAT
✖️
GET /orgs/{org}/actions/permissionsreadUAT
IAT
✖️
GET /orgs/{org}/actions/permissions/repositoriesreadUAT
IAT
✖️
GET /orgs/{org}/actions/permissions/selected-actionsreadUAT
IAT
✖️
GET /orgs/{org}/actions/permissions/workflowreadUAT
IAT
✖️
GET /orgs/{org}/installationsreadUAT
IAT
✖️
GET /orgs/{org}/interaction-limitsreadUAT
IAT
✖️
GET /orgs/{org}/security-managersreadUAT
IAT
✖️
GET /orgs/{org}/settings/billing/actionsreadUAT
IAT
✖️
GET /orgs/{org}/settings/billing/packagesreadUAT
IAT
✖️
GET /orgs/{org}/settings/billing/shared-storagereadUAT
IAT
✖️

Organization permissions for "Events"

EndpointAccessToken typesAdditional permissions
GET /users/{username}/events/orgs/{org}readUAT
✖️

Organization permissions for "Projects"

EndpointAccessToken typesAdditional permissions
GET /projects/{project_id}/collaboratorsadminUAT
IAT
PUT /projects/{project_id}/collaborators/{username}adminUAT
IAT
DELETE /projects/{project_id}/collaborators/{username}adminUAT
IAT
GET /projects/{project_id}/collaborators/{username}/permissionadminUAT
IAT
POST /orgs/{org}/projectswriteUAT
IAT
✖️
PATCH /projects/columns/cards/{card_id}writeUAT
IAT
DELETE /projects/columns/cards/{card_id}writeUAT
IAT
POST /projects/columns/cards/{card_id}/moveswriteUAT
IAT
PATCH /projects/columns/{column_id}writeUAT
IAT
DELETE /projects/columns/{column_id}writeUAT
IAT
POST /projects/columns/{column_id}/cardswriteUAT
IAT
POST /projects/columns/{column_id}/moveswriteUAT
IAT
PATCH /projects/{project_id}writeUAT
IAT
DELETE /projects/{project_id}writeUAT
IAT
POST /projects/{project_id}/columnswriteUAT
IAT
GET /orgs/{org}/projectsreadUAT
IAT
✖️
GET /projects/columns/cards/{card_id}readUAT
IAT
GET /projects/columns/{column_id}readUAT
IAT
GET /projects/columns/{column_id}/cardsreadUAT
IAT
GET /projects/{project_id}readUAT
IAT
GET /projects/{project_id}/columnsreadUAT
IAT

Repository permissions for "Actions"

EndpointAccessToken typesAdditional permissions
DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/actions/cacheswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerunwriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/actions/oidc/customization/subwriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/approvewriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancelwriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancelwriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerunwriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disablewriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatcheswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enablewriteUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/artifactsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/cache/usagereadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/cachesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/jobs/{job_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/oidc/customization/subreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvalsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifactsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/logsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsreadUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsreadUAT
IAT
GET /repos/{owner}/{repo}/actions/runs/{run_id}/timingreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/workflowsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/timingreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/environmentsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/environments/{environment_name}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policiesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rulesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/appsreadUAT
IAT
✖️

Repository permissions for "Administration"

EndpointAccessToken typesAdditional permissions
POST /orgs/{org}/reposwriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}writeUAT
IAT
✖️
PUT /repos/{owner}/{repo}/actions/permissionswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/actions/permissions/accesswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/actions/permissions/selected-actionswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/actions/permissions/workflowwriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runners/generate-jitconfigwriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runners/registration-tokenwriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runners/remove-tokenwriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/autolinkswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}writeUAT
IAT
✖️
PUT /repos/{owner}/{repo}/automated-security-fixeswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/automated-security-fixeswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protectionwriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protectionwriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminswriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatureswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatureswriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checkswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checkswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictionswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/code-scanning/default-setupwriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name}writeUAT
IAT
DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name}writeUAT
IAT
PUT /repos/{owner}/{repo}/collaborators/{username}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/collaborators/{username}writeUAT
IAT
✖️
PUT /repos/{owner}/{repo}/environments/{environment_name}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/environments/{environment_name}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policieswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_ruleswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/forkswriteUAT
IAT
PUT /repos/{owner}/{repo}/interaction-limitswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/interaction-limitswriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/invitations/{invitation_id}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/invitations/{invitation_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/keyswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/keys/{key_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/pageswriteUAT
IAT
PUT /repos/{owner}/{repo}/pageswriteUAT
IAT
DELETE /repos/{owner}/{repo}/pageswriteUAT
IAT
GET /repos/{owner}/{repo}/pages/healthwriteUAT
IAT
PUT /repos/{owner}/{repo}/private-vulnerability-reportingwriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/private-vulnerability-reportingwriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/rulesetswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/tags/protectionwriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/tags/protection/{tag_protection_id}writeUAT
IAT
✖️
PUT /repos/{owner}/{repo}/topicswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/transferwriteUAT
✖️
PUT /repos/{owner}/{repo}/vulnerability-alertswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/vulnerability-alertswriteUAT
IAT
✖️
POST /user/reposwriteUAT
✖️
PATCH /user/repository_invitations/{invitation_id}writeUAT
✖️
DELETE /user/repository_invitations/{invitation_id}writeUAT
✖️
GET /repos/{owner}/{repo}/actions/permissionsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/permissions/accessreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/permissions/selected-actionsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/permissions/workflowreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runnersreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runners/downloadsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runners/{runner_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labelsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/autolinksreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/autolinks/{autolink_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/automated-security-fixesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protectionreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signaturesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checksreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictionsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/usersreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/interaction-limitsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/invitationsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/keysreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/keys/{key_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/tags/protectionreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/teamsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/traffic/clonesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/traffic/popular/pathsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/traffic/popular/referrersreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/traffic/viewsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/vulnerability-alertsreadUAT
IAT
✖️
GET /user/repository_invitationsreadUAT
✖️

Repository permissions for "Contents"

EndpointAccessToken typesAdditional permissions
POST /repos/{owner}/{repo}/branches/{branch}/renamewriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/comments/{comment_id}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/comments/{comment_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/comments/{comment_id}/reactionswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}writeUAT
IAT
✖️
PUT /repos/{owner}/{repo}/contents/{path}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/contents/{path}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/dependency-graph/snapshotswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/dispatcheswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/git/blobswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/git/commitswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/git/refswriteUAT
IAT
PATCH /repos/{owner}/{repo}/git/refs/{ref}writeUAT
IAT
DELETE /repos/{owner}/{repo}/git/refs/{ref}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/git/tagswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/git/treeswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/importwriteUAT
✖️
PATCH /repos/{owner}/{repo}/importwriteUAT
✖️
DELETE /repos/{owner}/{repo}/importwriteUAT
✖️
PATCH /repos/{owner}/{repo}/import/authors/{author_id}writeUAT
✖️
PATCH /repos/{owner}/{repo}/import/lfswriteUAT
✖️
POST /repos/{owner}/{repo}/merge-upstreamwriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/mergeswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/mergewriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/releaseswriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/releases/generate-noteswriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/releases/{release_id}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/releases/{release_id}writeUAT
IAT
✖️
GET /repos/{owner}/{repo}/activityreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branchesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/branches/{branch}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/code-scanning/codeql/databasesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/codeowners/errorsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/commitsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-headreadUAT
IAT
✖️
POST /repos/{owner}/{repo}/commits/{commit_sha}/commentsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/commits/{ref}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/community/profilereadUAT
IAT
✖️
GET /repos/{owner}/{repo}/compare/{basehead}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/contents/{path}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}readUAT
IAT
GET /repos/{owner}/{repo}/dependency-graph/sbomreadUAT
IAT
✖️
POST /repos/{owner}/{repo}/forksreadUAT
IAT
GET /repos/{owner}/{repo}/git/blobs/{file_sha}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/git/commits/{commit_sha}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/git/matching-refs/{ref}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/git/ref/{ref}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/git/tags/{tag_sha}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/git/trees/{tree_sha}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/importreadUAT
✖️
GET /repos/{owner}/{repo}/import/authorsreadUAT
✖️
GET /repos/{owner}/{repo}/import/large_filesreadUAT
✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}readUAT
IAT
GET /repos/{owner}/{repo}/releasesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/releases/assets/{asset_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/releases/latestreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/releases/tags/{tag}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/releases/{release_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/releases/{release_id}/assetsreadUAT
IAT
✖️

Repository permissions for "Issues"

EndpointAccessToken typesAdditional permissions
POST /repos/{owner}/{repo}/issueswriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}writeUAT
IAT
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}writeUAT
IAT
POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactionswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}writeUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/issues/{issue_number}writeUAT
IAT
POST /repos/{owner}/{repo}/issues/{issue_number}/assigneeswriteUAT
IAT
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assigneeswriteUAT
IAT
POST /repos/{owner}/{repo}/issues/{issue_number}/commentswriteUAT
IAT
POST /repos/{owner}/{repo}/issues/{issue_number}/labelswriteUAT
IAT
PUT /repos/{owner}/{repo}/issues/{issue_number}/labelswriteUAT
IAT
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labelswriteUAT
IAT
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}writeUAT
IAT
PUT /repos/{owner}/{repo}/issues/{issue_number}/lockwriteUAT
IAT
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lockwriteUAT
IAT
POST /repos/{owner}/{repo}/issues/{issue_number}/reactionswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/labelswriteUAT
IAT
PATCH /repos/{owner}/{repo}/labels/{name}writeUAT
IAT
DELETE /repos/{owner}/{repo}/labels/{name}writeUAT
IAT
POST /repos/{owner}/{repo}/milestoneswriteUAT
IAT
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}writeUAT
IAT
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}writeUAT
IAT
GET /repos/{owner}/{repo}/assigneesreadUAT
IAT
GET /repos/{owner}/{repo}/assignees/{assignee}readUAT
IAT
GET /repos/{owner}/{repo}/issuesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/issues/commentsreadUAT
IAT
GET /repos/{owner}/{repo}/issues/comments/{comment_id}readUAT
IAT
GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactionsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/issues/eventsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/issues/events/{event_id}readUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}readUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}/commentsreadUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}/eventsreadUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}/labelsreadUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}/reactionsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/issues/{issue_number}/timelinereadUAT
IAT
GET /repos/{owner}/{repo}/labelsreadUAT
IAT
GET /repos/{owner}/{repo}/labels/{name}readUAT
IAT
GET /repos/{owner}/{repo}/milestonesreadUAT
IAT
GET /repos/{owner}/{repo}/milestones/{milestone_number}readUAT
IAT
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labelsreadUAT
IAT

Repository permissions for "Metadata"

EndpointAccessToken typesAdditional permissions
POST /gistsreadUAT
PATCH /gists/{gist_id}readUAT
DELETE /gists/{gist_id}readUAT
POST /gists/{gist_id}/commentsreadUAT
GET /gists/{gist_id}/comments/{comment_id}readUAT
✖️
PATCH /gists/{gist_id}/comments/{comment_id}readUAT
DELETE /gists/{gist_id}/comments/{comment_id}readUAT
POST /gists/{gist_id}/forksreadUAT
PUT /gists/{gist_id}/starreadUAT
DELETE /gists/{gist_id}/starreadUAT
GET /notificationsreadUAT
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}readUAT
IAT
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}readUAT
IAT
PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}readUAT
IAT
DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}readUAT
IAT
PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}readUAT
IAT
PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}readUAT
IAT
DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}readUAT
IAT
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}readUAT
IAT
DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}readUAT
IAT
GET /orgs/{org}/reposreadUAT
IAT
✖️
GET /repos/{owner}/{repo}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/collaboratorsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/collaborators/{username}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/collaborators/{username}/permissionreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/commentsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/comments/{comment_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/comments/{comment_id}/reactionsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/commits/{commit_sha}/commentsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/contributorsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/eventsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/forksreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/languagesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/licensereadUAT
IAT
✖️
GET /repos/{owner}/{repo}/rules/branches/{branch}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/rulesetsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/rulesets/{ruleset_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/stargazersreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/stats/code_frequencyreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/stats/commit_activityreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/stats/contributorsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/stats/participationreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/stats/punch_cardreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/subscribersreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/tagsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/topicsreadUAT
IAT
✖️
POST /repos/{template_owner}/{template_repo}/generatereadUAT
✖️
GET /repositoriesreadUAT
IAT
✖️
GET /search/labelsreadUAT
IAT
✖️
GET /user/codespaces/secrets/{secret_name}/repositoriesreadUAT
PUT /user/codespaces/secrets/{secret_name}/repositoriesreadUAT
PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}readUAT
DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}readUAT
GET /user/installations/{installation_id}/repositoriesreadUAT
✖️
GET /user/reposreadUAT
✖️
GET /users/{username}/reposreadUAT
IAT
✖️

Repository permissions for "Projects"

EndpointAccessToken typesAdditional permissions
PATCH /projects/columns/cards/{card_id}writeUAT
IAT
DELETE /projects/columns/cards/{card_id}writeUAT
IAT
POST /projects/columns/cards/{card_id}/moveswriteUAT
IAT
PATCH /projects/columns/{column_id}writeUAT
IAT
DELETE /projects/columns/{column_id}writeUAT
IAT
POST /projects/columns/{column_id}/cardswriteUAT
IAT
POST /projects/columns/{column_id}/moveswriteUAT
IAT
PATCH /projects/{project_id}writeUAT
IAT
DELETE /projects/{project_id}writeUAT
IAT
GET /projects/{project_id}/collaboratorswriteUAT
IAT
PUT /projects/{project_id}/collaborators/{username}writeUAT
IAT
DELETE /projects/{project_id}/collaborators/{username}writeUAT
IAT
GET /projects/{project_id}/collaborators/{username}/permissionwriteUAT
IAT
POST /projects/{project_id}/columnswriteUAT
IAT
POST /repos/{owner}/{repo}/projectswriteUAT
IAT
✖️
GET /projects/columns/cards/{card_id}readUAT
IAT
GET /projects/columns/{column_id}readUAT
IAT
GET /projects/columns/{column_id}/cardsreadUAT
IAT
GET /projects/{project_id}readUAT
IAT
GET /projects/{project_id}/columnsreadUAT
IAT
GET /repos/{owner}/{repo}/projectsreadUAT
IAT
✖️

Repository permissions for "Pull requests"

EndpointAccessToken typesAdditional permissions
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}writeUAT
IAT
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}writeUAT
IAT
PATCH /repos/{owner}/{repo}/issues/{issue_number}writeUAT
IAT
POST /repos/{owner}/{repo}/issues/{issue_number}/assigneeswriteUAT
IAT
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assigneeswriteUAT
IAT
POST /repos/{owner}/{repo}/issues/{issue_number}/commentswriteUAT
IAT
POST /repos/{owner}/{repo}/issues/{issue_number}/labelswriteUAT
IAT
PUT /repos/{owner}/{repo}/issues/{issue_number}/labelswriteUAT
IAT
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labelswriteUAT
IAT
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}writeUAT
IAT
PUT /repos/{owner}/{repo}/issues/{issue_number}/lockwriteUAT
IAT
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lockwriteUAT
IAT
POST /repos/{owner}/{repo}/labelswriteUAT
IAT
PATCH /repos/{owner}/{repo}/labels/{name}writeUAT
IAT
DELETE /repos/{owner}/{repo}/labels/{name}writeUAT
IAT
POST /repos/{owner}/{repo}/milestoneswriteUAT
IAT
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}writeUAT
IAT
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}writeUAT
IAT
POST /repos/{owner}/{repo}/pullswriteUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactionswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}writeUAT
IAT
✖️
PATCH /repos/{owner}/{repo}/pulls/{pull_number}writeUAT
IAT
✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/commentswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replieswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewerswriteUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewerswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviewswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}writeUAT
IAT
✖️
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}writeUAT
IAT
✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissalswriteUAT
IAT
✖️
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/eventswriteUAT
IAT
✖️
PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branchwriteUAT
IAT
✖️
GET /repos/{owner}/{repo}/assigneesreadUAT
IAT
GET /repos/{owner}/{repo}/assignees/{assignee}readUAT
IAT
GET /repos/{owner}/{repo}/commits/{commit_sha}/pullsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}readUAT
IAT
GET /repos/{owner}/{repo}/issues/commentsreadUAT
IAT
GET /repos/{owner}/{repo}/issues/comments/{comment_id}readUAT
IAT
GET /repos/{owner}/{repo}/issues/events/{event_id}readUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}readUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}/commentsreadUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}/eventsreadUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}/labelsreadUAT
IAT
GET /repos/{owner}/{repo}/issues/{issue_number}/timelinereadUAT
IAT
GET /repos/{owner}/{repo}/labelsreadUAT
IAT
GET /repos/{owner}/{repo}/labels/{name}readUAT
IAT
GET /repos/{owner}/{repo}/milestonesreadUAT
IAT
GET /repos/{owner}/{repo}/milestones/{milestone_number}readUAT
IAT
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labelsreadUAT
IAT
GET /repos/{owner}/{repo}/pullsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/commentsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactionsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}readUAT
IAT
GET /repos/{owner}/{repo}/pulls/{pull_number}/commentsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/commitsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/filesreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/mergereadUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewersreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviewsreadUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}readUAT
IAT
✖️
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/commentsreadUAT
IAT
✖️

User permissions for "Profile"

EndpointAccessToken typesAdditional permissions
PATCH /userwriteUAT
✖️
POST /user/social_accountswriteUAT
✖️
DELETE /user/social_accountswriteUAT
✖️

User permissions for "Watching"

EndpointAccessToken typesAdditional permissions
GET /user/subscriptionsreadUAT
✖️
GET /users/{username}/subscriptionsreadUAT
IAT
✖️