Permissions required for fine-grained personal access tokens

For each permission granted to a fine-grained personal access token, these are the REST API endpoints that the app can use.

In this article

About permissions required for fine-grained personal access token

When you create a fine-grained personal access token, you grant it a set of permissions. Permissions define what resources the GitHub App can access via the API. For more information, see "Managing your personal access tokens."

To help you choose the correct permissions, you will receive the X-Accepted-GitHub-Permissions header in the REST API response. The header will tell you what permissions are required in order to access the endpoint. For more information, see "Troubleshooting the REST API."

These permissions are required to access private resources. Some endpoints can also be used to access public resources without these permissions. To see whether an endpoint can access public resources without a permission, see the documentation for that endpoint.

Some endpoints require more than one permission. Other endpoints work with any one permission from a set of permissions. In these cases, the "Additional permissions" column will include a checkmark. For full details about the permissions that are required to use the endpoint, see the documentation for that endpoint.

Business permissions for "Enterprise administration"

EndpointAccessAdditional permissions
GET /enterprises/{enterprise}/actions/cache/usagewrite
PUT /enterprises/{enterprise}/actions/oidc/customization/issuerwrite
GET /enterprises/{enterprise}/settings/billing/actionswrite
GET /enterprises/{enterprise}/settings/billing/advanced-securitywrite
GET /enterprises/{enterprise}/settings/billing/packageswrite
GET /enterprises/{enterprise}/settings/billing/shared-storagewrite
GET /scim/v2/enterprises/{enterprise}/Groupswrite
POST /scim/v2/enterprises/{enterprise}/Groupswrite
GET /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}write
PUT /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}write
PATCH /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}write
DELETE /scim/v2/enterprises/{enterprise}/Groups/{scim_group_id}write
GET /scim/v2/enterprises/{enterprise}/Userswrite
POST /scim/v2/enterprises/{enterprise}/Userswrite
GET /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}write
PUT /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}write
PATCH /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}write
DELETE /scim/v2/enterprises/{enterprise}/Users/{scim_user_id}write
GET /enterprise-installation/{enterprise_or_org}/server-statisticsread
GET /enterprises/{enterprise}/audit-logread
GET /enterprises/{enterprise}/consumed-licensesread
GET /enterprises/{enterprise}/license-sync-statusread

Organization permissions for "API Insights"

EndpointAccessAdditional permissions
GET /orgs/{org}/insights/api/route-stats/{actor_type}/{actor_id}read
GET /orgs/{org}/insights/api/subject-statsread
GET /orgs/{org}/insights/api/summary-statsread
GET /orgs/{org}/insights/api/summary-stats/users/{user_id}read
GET /orgs/{org}/insights/api/summary-stats/{actor_type}/{actor_id}read
GET /orgs/{org}/insights/api/time-statsread
GET /orgs/{org}/insights/api/time-stats/users/{user_id}read
GET /orgs/{org}/insights/api/time-stats/{actor_type}/{actor_id}read
GET /orgs/{org}/insights/api/user-stats/{user_id}read

Organization permissions for "Administration"

EndpointAccessAdditional permissions
PATCH /orgs/{org}write
DELETE /orgs/{org}write
PUT /orgs/{org}/actions/oidc/customization/subwrite
PUT /orgs/{org}/actions/permissionswrite
PUT /orgs/{org}/actions/permissions/repositorieswrite
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}write
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}write
PUT /orgs/{org}/actions/permissions/selected-actionswrite
PUT /orgs/{org}/actions/permissions/workflowwrite
GET /orgs/{org}/code-security/configurationswrite
POST /orgs/{org}/code-security/configurationswrite
GET /orgs/{org}/code-security/configurations/defaultswrite
DELETE /orgs/{org}/code-security/configurations/detachwrite
GET /orgs/{org}/code-security/configurations/{configuration_id}write
PATCH /orgs/{org}/code-security/configurations/{configuration_id}write
DELETE /orgs/{org}/code-security/configurations/{configuration_id}write
POST /orgs/{org}/code-security/configurations/{configuration_id}/attachwrite
PUT /orgs/{org}/code-security/configurations/{configuration_id}/defaultswrite
GET /orgs/{org}/code-security/configurations/{configuration_id}/repositorieswrite
POST /orgs/{org}/copilot/billing/selected_teamswrite
DELETE /orgs/{org}/copilot/billing/selected_teamswrite
POST /orgs/{org}/copilot/billing/selected_userswrite
DELETE /orgs/{org}/copilot/billing/selected_userswrite
DELETE /orgs/{org}/credential-authorizations/{credential_id}write
PUT /orgs/{org}/interaction-limitswrite
DELETE /orgs/{org}/interaction-limitswrite
GET /orgs/{org}/rulesetswrite
POST /orgs/{org}/rulesetswrite
GET /orgs/{org}/rulesets/rule-suiteswrite
GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id}write
GET /orgs/{org}/rulesets/{ruleset_id}write
PUT /orgs/{org}/rulesets/{ruleset_id}write
DELETE /orgs/{org}/rulesets/{ruleset_id}write
PUT /orgs/{org}/security-managers/teams/{team_slug}write
DELETE /orgs/{org}/security-managers/teams/{team_slug}write
POST /orgs/{org}/{security_product}/{enablement}write
GET /enterprise-installation/{enterprise_or_org}/server-statisticsread
GET /organizations/{organization_id}/custom_rolesread
GET /orgs/{org}/actions/cache/usageread
GET /orgs/{org}/actions/cache/usage-by-repositoryread
GET /orgs/{org}/actions/oidc/customization/subread
GET /orgs/{org}/actions/permissionsread
GET /orgs/{org}/actions/permissions/repositoriesread
GET /orgs/{org}/actions/permissions/selected-actionsread
GET /orgs/{org}/actions/permissions/workflowread
GET /orgs/{org}/audit-logread
GET /orgs/{org}/copilot/billingread
GET /orgs/{org}/copilot/billing/seatsread
GET /orgs/{org}/copilot/metricsread
GET /orgs/{org}/copilot/usageread
GET /orgs/{org}/credential-authorizationsread
GET /orgs/{org}/custom-repository-rolesread
GET /orgs/{org}/custom-repository-roles/{role_id}read
GET /orgs/{org}/custom_roles/{role_id}read
GET /orgs/{org}/fine_grained_permissionsread
GET /orgs/{org}/installationsread
GET /orgs/{org}/interaction-limitsread
GET /orgs/{org}/members/{username}/copilotread
GET /orgs/{org}/repository-fine-grained-permissionsread
GET /orgs/{org}/security-managersread
GET /orgs/{org}/settings/billing/actionsread
GET /orgs/{org}/settings/billing/advanced-securityread
GET /orgs/{org}/settings/billing/packagesread
GET /orgs/{org}/settings/billing/shared-storageread
GET /orgs/{org}/team/{team_slug}/copilot/metricsread
GET /orgs/{org}/team/{team_slug}/copilot/usageread

Organization permissions for "Blocking users"

EndpointAccessAdditional permissions
PUT /orgs/{org}/blocks/{username}write
DELETE /orgs/{org}/blocks/{username}write
GET /orgs/{org}/blocksread
GET /orgs/{org}/blocks/{username}read

Organization permissions for "Custom organization roles"

EndpointAccessAdditional permissions
POST /orgs/{org}/organization-roleswrite
PATCH /orgs/{org}/organization-roles/{role_id}write
DELETE /orgs/{org}/organization-roles/{role_id}write
GET /orgs/{org}/organization-fine-grained-permissionsread
GET /orgs/{org}/organization-rolesread
GET /orgs/{org}/organization-roles/{role_id}read

Organization permissions for "Custom properties"

EndpointAccessAdditional permissions
PATCH /orgs/{org}/properties/schemaadmin
PUT /orgs/{org}/properties/schema/{custom_property_name}admin
DELETE /orgs/{org}/properties/schema/{custom_property_name}admin
PATCH /orgs/{org}/properties/valueswrite
GET /orgs/{org}/properties/schemaread
GET /orgs/{org}/properties/schema/{custom_property_name}read
GET /orgs/{org}/properties/valuesread

Organization permissions for "Custom repository roles"

EndpointAccessAdditional permissions
POST /orgs/{org}/custom-repository-roleswrite
PATCH /orgs/{org}/custom-repository-roles/{role_id}write
DELETE /orgs/{org}/custom-repository-roles/{role_id}write
POST /orgs/{org}/custom_roleswrite
PATCH /orgs/{org}/custom_roles/{role_id}write
DELETE /orgs/{org}/custom_roles/{role_id}write
GET /organizations/{organization_id}/custom_rolesread
GET /orgs/{org}/custom-repository-rolesread
GET /orgs/{org}/custom-repository-roles/{role_id}read
GET /orgs/{org}/custom_roles/{role_id}read
GET /orgs/{org}/fine_grained_permissionsread
GET /orgs/{org}/repository-fine-grained-permissionsread

Organization permissions for "Events"

EndpointAccessAdditional permissions
GET /users/{username}/events/orgs/{org}read

Organization permissions for "GitHub Copilot Business"

EndpointAccessAdditional permissions
POST /orgs/{org}/copilot/billing/selected_teamswrite
DELETE /orgs/{org}/copilot/billing/selected_teamswrite
POST /orgs/{org}/copilot/billing/selected_userswrite
DELETE /orgs/{org}/copilot/billing/selected_userswrite
GET /orgs/{org}/copilot/billingread
GET /orgs/{org}/copilot/billing/seatsread
GET /orgs/{org}/copilot/metricsread
GET /orgs/{org}/copilot/usageread
GET /orgs/{org}/members/{username}/copilotread
GET /orgs/{org}/team/{team_slug}/copilot/metricsread
GET /orgs/{org}/team/{team_slug}/copilot/usageread

Organization permissions for "Members"

EndpointAccessAdditional permissions
GET /orgs/{org}/external-group/{group_id}write
GET /orgs/{org}/external-groupswrite
POST /orgs/{org}/invitationswrite
DELETE /orgs/{org}/invitations/{invitation_id}write
DELETE /orgs/{org}/members/{username}write
PUT /orgs/{org}/memberships/{username}write
DELETE /orgs/{org}/memberships/{username}write
DELETE /orgs/{org}/organization-roles/teams/{team_slug}write
PUT /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}write
DELETE /orgs/{org}/organization-roles/teams/{team_slug}/{role_id}write
DELETE /orgs/{org}/organization-roles/users/{username}write
PUT /orgs/{org}/organization-roles/users/{username}/{role_id}write
DELETE /orgs/{org}/organization-roles/users/{username}/{role_id}write
PUT /orgs/{org}/outside_collaborators/{username}write
DELETE /orgs/{org}/outside_collaborators/{username}write
PUT /orgs/{org}/public_members/{username}write
DELETE /orgs/{org}/public_members/{username}write
GET /orgs/{org}/team-sync/groupswrite
POST /orgs/{org}/teamswrite
GET /orgs/{org}/teams/{team_slug}/external-groupswrite
PATCH /orgs/{org}/teams/{team_slug}/external-groupswrite
DELETE /orgs/{org}/teams/{team_slug}/external-groupswrite
POST /scim/v2/organizations/{org}/Userswrite
PUT /scim/v2/organizations/{org}/Users/{scim_user_id}write
PATCH /scim/v2/organizations/{org}/Users/{scim_user_id}write
DELETE /scim/v2/organizations/{org}/Users/{scim_user_id}write
PUT /teams/{team_id}/members/{username}write
DELETE /teams/{team_id}/members/{username}write
PATCH /user/memberships/orgs/{org}write
GET /orgs/{org}/failed_invitationsread
GET /orgs/{org}/invitationsread
GET /orgs/{org}/invitations/{invitation_id}/teamsread
GET /orgs/{org}/membersread
GET /orgs/{org}/members/{username}read
GET /orgs/{org}/memberships/{username}read
GET /orgs/{org}/organization-roles/{role_id}/teamsread
GET /orgs/{org}/organization-roles/{role_id}/usersread
GET /orgs/{org}/outside_collaboratorsread
GET /orgs/{org}/public_membersread
GET /orgs/{org}/public_members/{username}read
GET /orgs/{org}/teamsread
GET /scim/v2/organizations/{org}/Usersread
GET /scim/v2/organizations/{org}/Users/{scim_user_id}read
GET /teams/{team_id}/members/{username}read
GET /user/memberships/orgs/{org}read

Organization permissions for "Organization announcement banners"

EndpointAccessAdditional permissions
PATCH /orgs/{org}/announcementwrite
DELETE /orgs/{org}/announcementwrite
GET /orgs/{org}/announcementread

Organization permissions for "Organization codespaces secrets"

EndpointAccessAdditional permissions
PUT /orgs/{org}/codespaces/secrets/{secret_name}write
DELETE /orgs/{org}/codespaces/secrets/{secret_name}write
PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositorieswrite
PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}write
DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}write
GET /orgs/{org}/codespaces/secretsread
GET /orgs/{org}/codespaces/secrets/public-keyread
GET /orgs/{org}/codespaces/secrets/{secret_name}read
GET /orgs/{org}/codespaces/secrets/{secret_name}/repositoriesread

Organization permissions for "Organization codespaces settings"

EndpointAccessAdditional permissions
PUT /orgs/{org}/codespaces/accesswrite
POST /orgs/{org}/codespaces/access/selected_userswrite
DELETE /orgs/{org}/codespaces/access/selected_userswrite

Organization permissions for "Organization codespaces"

EndpointAccessAdditional permissions
DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}write
POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stopwrite
GET /orgs/{org}/codespacesread
GET /orgs/{org}/members/{username}/codespacesread

Organization permissions for "Organization dependabot secrets"

EndpointAccessAdditional permissions
PUT /orgs/{org}/dependabot/secrets/{secret_name}write
DELETE /orgs/{org}/dependabot/secrets/{secret_name}write
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositorieswrite
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}write
DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}write
GET /orgs/{org}/dependabot/secretsread
GET /orgs/{org}/dependabot/secrets/public-keyread
GET /orgs/{org}/dependabot/secrets/{secret_name}read
GET /orgs/{org}/dependabot/secrets/{secret_name}/repositoriesread

Organization permissions for "Personal access token requests"

EndpointAccessAdditional permissions
POST /orgs/{org}/personal-access-token-requestswrite
POST /orgs/{org}/personal-access-token-requests/{pat_request_id}write
GET /orgs/{org}/personal-access-token-requestsread
GET /orgs/{org}/personal-access-token-requests/{pat_request_id}/repositoriesread

Organization permissions for "Personal access tokens"

EndpointAccessAdditional permissions
POST /orgs/{org}/personal-access-tokenswrite
POST /orgs/{org}/personal-access-tokens/{pat_id}write
GET /orgs/{org}/personal-access-tokensread
GET /orgs/{org}/personal-access-tokens/{pat_id}/repositoriesread

Organization permissions for "Projects"

EndpointAccessAdditional permissions
GET /projects/{project_id}/collaboratorsadmin
PUT /projects/{project_id}/collaborators/{username}admin
DELETE /projects/{project_id}/collaborators/{username}admin
GET /projects/{project_id}/collaborators/{username}/permissionadmin
POST /orgs/{org}/projectswrite
PATCH /projects/columns/cards/{card_id}write
DELETE /projects/columns/cards/{card_id}write
POST /projects/columns/cards/{card_id}/moveswrite
PATCH /projects/columns/{column_id}write
DELETE /projects/columns/{column_id}write
POST /projects/columns/{column_id}/cardswrite
POST /projects/columns/{column_id}/moveswrite
PATCH /projects/{project_id}write
DELETE /projects/{project_id}write
POST /projects/{project_id}/columnswrite
GET /orgs/{org}/projectsread
GET /projects/columns/cards/{card_id}read
GET /projects/columns/{column_id}read
GET /projects/columns/{column_id}/cardsread
GET /projects/{project_id}read
GET /projects/{project_id}/columnsread

Organization permissions for "Secrets"

EndpointAccessAdditional permissions
PUT /orgs/{org}/actions/secrets/{secret_name}write
DELETE /orgs/{org}/actions/secrets/{secret_name}write
PUT /orgs/{org}/actions/secrets/{secret_name}/repositorieswrite
PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}write
DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}write
GET /orgs/{org}/actions/secretsread
GET /orgs/{org}/actions/secrets/public-keyread
GET /orgs/{org}/actions/secrets/{secret_name}read
GET /orgs/{org}/actions/secrets/{secret_name}/repositoriesread

Organization permissions for "Self-hosted runners"

EndpointAccessAdditional permissions
POST /orgs/{org}/actions/runner-groupswrite
PATCH /orgs/{org}/actions/runner-groups/{runner_group_id}write
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}write
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositorieswrite
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}write
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}write
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runnerswrite
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}write
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/runners/{runner_id}write
POST /orgs/{org}/actions/runners/generate-jitconfigwrite
POST /orgs/{org}/actions/runners/registration-tokenwrite
POST /orgs/{org}/actions/runners/remove-tokenwrite
DELETE /orgs/{org}/actions/runners/{runner_id}write
POST /orgs/{org}/actions/runners/{runner_id}/labelswrite
PUT /orgs/{org}/actions/runners/{runner_id}/labelswrite
DELETE /orgs/{org}/actions/runners/{runner_id}/labelswrite
DELETE /orgs/{org}/actions/runners/{runner_id}/labels/{name}write
GET /orgs/{org}/actions/runner-groupsread
GET /orgs/{org}/actions/runner-groups/{runner_group_id}read
GET /orgs/{org}/actions/runner-groups/{runner_group_id}/repositoriesread
GET /orgs/{org}/actions/runner-groups/{runner_group_id}/runnersread
GET /orgs/{org}/actions/runnersread
GET /orgs/{org}/actions/runners/downloadsread
GET /orgs/{org}/actions/runners/{runner_id}read
GET /orgs/{org}/actions/runners/{runner_id}/labelsread

Organization permissions for "Team discussions"

EndpointAccessAdditional permissions
DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/comments/{comment_number}/reactions/{reaction_id}write
DELETE /orgs/{org}/teams/{team_slug}/discussions/{discussion_number}/reactions/{reaction_id}write

Organization permissions for "Variables"

EndpointAccessAdditional permissions
POST /orgs/{org}/actions/variableswrite
PATCH /orgs/{org}/actions/variables/{name}write
DELETE /orgs/{org}/actions/variables/{name}write
PUT /orgs/{org}/actions/variables/{name}/repositorieswrite
PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}write
DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}write
GET /orgs/{org}/actions/variablesread
GET /orgs/{org}/actions/variables/{name}read
GET /orgs/{org}/actions/variables/{name}/repositoriesread

Organization permissions for "Webhooks"

EndpointAccessAdditional permissions
POST /orgs/{org}/hookswrite
PATCH /orgs/{org}/hooks/{hook_id}write
DELETE /orgs/{org}/hooks/{hook_id}write
PATCH /orgs/{org}/hooks/{hook_id}/configwrite
POST /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}/attemptswrite
POST /orgs/{org}/hooks/{hook_id}/pingswrite
GET /orgs/{org}/hooksread
GET /orgs/{org}/hooks/{hook_id}read
GET /orgs/{org}/hooks/{hook_id}/configread
GET /orgs/{org}/hooks/{hook_id}/deliveriesread
GET /orgs/{org}/hooks/{hook_id}/deliveries/{delivery_id}read

Repository permissions for "Actions"

EndpointAccessAdditional permissions
DELETE /repos/{owner}/{repo}/actions/artifacts/{artifact_id}write
DELETE /repos/{owner}/{repo}/actions/cacheswrite
DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}write
POST /repos/{owner}/{repo}/actions/jobs/{job_id}/rerunwrite
PUT /repos/{owner}/{repo}/actions/oidc/customization/subwrite
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}write
POST /repos/{owner}/{repo}/actions/runs/{run_id}/approvewrite
POST /repos/{owner}/{repo}/actions/runs/{run_id}/cancelwrite
POST /repos/{owner}/{repo}/actions/runs/{run_id}/force-cancelwrite
DELETE /repos/{owner}/{repo}/actions/runs/{run_id}/logswrite
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerunwrite
POST /repos/{owner}/{repo}/actions/runs/{run_id}/rerun-failed-jobswrite
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disablewrite
POST /repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatcheswrite
PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/enablewrite
GET /repos/{owner}/{repo}/actions/artifactsread
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}read
GET /repos/{owner}/{repo}/actions/artifacts/{artifact_id}/{archive_format}read
GET /repos/{owner}/{repo}/actions/cache/usageread
GET /repos/{owner}/{repo}/actions/cachesread
GET /repos/{owner}/{repo}/actions/jobs/{job_id}read
GET /repos/{owner}/{repo}/actions/jobs/{job_id}/logsread
GET /repos/{owner}/{repo}/actions/oidc/customization/subread
GET /repos/{owner}/{repo}/actions/runsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/approvalsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}/artifactsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}read
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/logsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}/jobsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}/logsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread
GET /repos/{owner}/{repo}/actions/runs/{run_id}/timingread
GET /repos/{owner}/{repo}/actions/workflowsread
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}read
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/runsread
GET /repos/{owner}/{repo}/actions/workflows/{workflow_id}/timingread
GET /repos/{owner}/{repo}/environmentsread
GET /repos/{owner}/{repo}/environments/{environment_name}read
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policiesread
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}read
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rulesread
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}read

Repository permissions for "Administration"

EndpointAccessAdditional permissions
POST /orgs/{org}/reposwrite
PATCH /repos/{owner}/{repo}write
DELETE /repos/{owner}/{repo}write
PUT /repos/{owner}/{repo}/actions/permissionswrite
PUT /repos/{owner}/{repo}/actions/permissions/accesswrite
PUT /repos/{owner}/{repo}/actions/permissions/selected-actionswrite
PUT /repos/{owner}/{repo}/actions/permissions/workflowwrite
POST /repos/{owner}/{repo}/actions/runners/generate-jitconfigwrite
POST /repos/{owner}/{repo}/actions/runners/registration-tokenwrite
POST /repos/{owner}/{repo}/actions/runners/remove-tokenwrite
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}write
POST /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswrite
PUT /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswrite
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labelswrite
DELETE /repos/{owner}/{repo}/actions/runners/{runner_id}/labels/{name}write
POST /repos/{owner}/{repo}/autolinkswrite
DELETE /repos/{owner}/{repo}/autolinks/{autolink_id}write
PUT /repos/{owner}/{repo}/automated-security-fixeswrite
DELETE /repos/{owner}/{repo}/automated-security-fixeswrite
PUT /repos/{owner}/{repo}/branches/{branch}/protectionwrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protectionwrite
POST /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminswrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminswrite
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewswrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewswrite
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_signatureswrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_signatureswrite
PATCH /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checkswrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checkswrite
POST /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswrite
PUT /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextswrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictionswrite
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswrite
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appswrite
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswrite
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamswrite
POST /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswrite
PUT /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswrite
DELETE /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/userswrite
PATCH /repos/{owner}/{repo}/code-scanning/default-setupwrite
PUT /repos/{owner}/{repo}/collaborators/{username}write
DELETE /repos/{owner}/{repo}/collaborators/{username}write
PUT /repos/{owner}/{repo}/environments/{environment_name}write
DELETE /repos/{owner}/{repo}/environments/{environment_name}write
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policieswrite
PUT /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}write
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}write
POST /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_ruleswrite
DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/{protection_rule_id}write
POST /repos/{owner}/{repo}/forkswrite
PUT /repos/{owner}/{repo}/interaction-limitswrite
DELETE /repos/{owner}/{repo}/interaction-limitswrite
PATCH /repos/{owner}/{repo}/invitations/{invitation_id}write
DELETE /repos/{owner}/{repo}/invitations/{invitation_id}write
POST /repos/{owner}/{repo}/keyswrite
DELETE /repos/{owner}/{repo}/keys/{key_id}write
POST /repos/{owner}/{repo}/pageswrite
PUT /repos/{owner}/{repo}/pageswrite
DELETE /repos/{owner}/{repo}/pageswrite
GET /repos/{owner}/{repo}/pages/healthwrite
PUT /repos/{owner}/{repo}/private-vulnerability-reportingwrite
DELETE /repos/{owner}/{repo}/private-vulnerability-reportingwrite
POST /repos/{owner}/{repo}/rulesetswrite
GET /repos/{owner}/{repo}/rulesets/rule-suiteswrite
GET /repos/{owner}/{repo}/rulesets/rule-suites/{rule_suite_id}write
PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}write
DELETE /repos/{owner}/{repo}/rulesets/{ruleset_id}write
POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forkswrite
POST /repos/{owner}/{repo}/tags/protectionwrite
DELETE /repos/{owner}/{repo}/tags/protection/{tag_protection_id}write
PUT /repos/{owner}/{repo}/topicswrite
POST /repos/{owner}/{repo}/transferwrite
PUT /repos/{owner}/{repo}/vulnerability-alertswrite
DELETE /repos/{owner}/{repo}/vulnerability-alertswrite
POST /repos/{template_owner}/{template_repo}/generatewrite
POST /user/reposwrite
PATCH /user/repository_invitations/{invitation_id}write
DELETE /user/repository_invitations/{invitation_id}write
GET /repos/{owner}/{repo}/actions/permissionsread
GET /repos/{owner}/{repo}/actions/permissions/accessread
GET /repos/{owner}/{repo}/actions/permissions/selected-actionsread
GET /repos/{owner}/{repo}/actions/permissions/workflowread
GET /repos/{owner}/{repo}/actions/runnersread
GET /repos/{owner}/{repo}/actions/runners/downloadsread
GET /repos/{owner}/{repo}/actions/runners/{runner_id}read
GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labelsread
GET /repos/{owner}/{repo}/autolinksread
GET /repos/{owner}/{repo}/autolinks/{autolink_id}read
GET /repos/{owner}/{repo}/automated-security-fixesread
GET /repos/{owner}/{repo}/branches/{branch}/protectionread
GET /repos/{owner}/{repo}/branches/{branch}/protection/enforce_adminsread
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_pull_request_reviewsread
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_signaturesread
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checksread
GET /repos/{owner}/{repo}/branches/{branch}/protection/required_status_checks/contextsread
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictionsread
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/appsread
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/teamsread
GET /repos/{owner}/{repo}/branches/{branch}/protection/restrictions/usersread
GET /repos/{owner}/{repo}/code-scanning/default-setupread
GET /repos/{owner}/{repo}/code-security-configurationread
GET /repos/{owner}/{repo}/environments/{environment_name}/deployment_protection_rules/appsread
GET /repos/{owner}/{repo}/interaction-limitsread
GET /repos/{owner}/{repo}/invitationsread
GET /repos/{owner}/{repo}/keysread
GET /repos/{owner}/{repo}/keys/{key_id}read
GET /repos/{owner}/{repo}/tags/protectionread
GET /repos/{owner}/{repo}/teamsread
GET /repos/{owner}/{repo}/traffic/clonesread
GET /repos/{owner}/{repo}/traffic/popular/pathsread
GET /repos/{owner}/{repo}/traffic/popular/referrersread
GET /repos/{owner}/{repo}/traffic/viewsread
GET /repos/{owner}/{repo}/vulnerability-alertsread
GET /user/repository_invitationsread

Repository permissions for "Attestations"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/attestationswrite
GET /repos/{owner}/{repo}/attestations/{subject_digest}read

Repository permissions for "Checks"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/check-runswrite
PATCH /repos/{owner}/{repo}/check-runs/{check_run_id}write
POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequestwrite
POST /repos/{owner}/{repo}/check-suiteswrite
PATCH /repos/{owner}/{repo}/check-suites/preferenceswrite
POST /repos/{owner}/{repo}/check-suites/{check_suite_id}/rerequestwrite
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread
GET /repos/{owner}/{repo}/check-runs/{check_run_id}read
GET /repos/{owner}/{repo}/check-runs/{check_run_id}/annotationsread
GET /repos/{owner}/{repo}/check-suites/{check_suite_id}read
GET /repos/{owner}/{repo}/check-suites/{check_suite_id}/check-runsread
GET /repos/{owner}/{repo}/commits/{ref}/check-runsread
GET /repos/{owner}/{repo}/commits/{ref}/check-suitesread

Repository permissions for "Code scanning alerts"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}write
DELETE /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}write
POST /repos/{owner}/{repo}/code-scanning/sarifswrite
GET /orgs/{org}/code-scanning/alertsread
GET /repos/{owner}/{repo}/code-scanning/alertsread
GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}read
GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/instancesread
GET /repos/{owner}/{repo}/code-scanning/analysesread
GET /repos/{owner}/{repo}/code-scanning/analyses/{analysis_id}read
GET /repos/{owner}/{repo}/code-scanning/sarifs/{sarif_id}read

Repository permissions for "Codespaces lifecycle admin"

EndpointAccessAdditional permissions
POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stopwrite
POST /user/codespaces/{codespace_name}/exportswrite
POST /user/codespaces/{codespace_name}/startwrite
POST /user/codespaces/{codespace_name}/stopwrite
GET /user/codespaces/{codespace_name}/exports/{export_id}read

Repository permissions for "Codespaces metadata"

EndpointAccessAdditional permissions
GET /repos/{owner}/{repo}/codespaces/devcontainersread
GET /repos/{owner}/{repo}/codespaces/machinesread
GET /user/codespaces/{codespace_name}/machinesread

Repository permissions for "Codespaces secrets"

EndpointAccessAdditional permissions
GET /repos/{owner}/{repo}/codespaces/secretswrite
GET /repos/{owner}/{repo}/codespaces/secrets/public-keywrite
GET /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write
PUT /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write
DELETE /repos/{owner}/{repo}/codespaces/secrets/{secret_name}write

Repository permissions for "Codespaces"

EndpointAccessAdditional permissions
DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}write
POST /repos/{owner}/{repo}/codespaceswrite
GET /repos/{owner}/{repo}/codespaces/newwrite
GET /repos/{owner}/{repo}/codespaces/permissions_checkwrite
POST /repos/{owner}/{repo}/pulls/{pull_number}/codespaceswrite
POST /user/codespaceswrite
PATCH /user/codespaces/{codespace_name}write
DELETE /user/codespaces/{codespace_name}write
POST /user/codespaces/{codespace_name}/publishwrite
GET /orgs/{org}/codespacesread
GET /orgs/{org}/members/{username}/codespacesread
GET /repos/{owner}/{repo}/codespacesread
GET /user/codespacesread
GET /user/codespaces/{codespace_name}read

Repository permissions for "Commit statuses"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/statuses/{sha}write
GET /repos/{owner}/{repo}/commits/{ref}/statusread
GET /repos/{owner}/{repo}/commits/{ref}/statusesread

Repository permissions for "Contents"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/branches/{branch}/renamewrite
DELETE /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}write
POST /repos/{owner}/{repo}/code-scanning/codeql/variant-analyseswrite
PATCH /repos/{owner}/{repo}/comments/{comment_id}write
DELETE /repos/{owner}/{repo}/comments/{comment_id}write
POST /repos/{owner}/{repo}/comments/{comment_id}/reactionswrite
DELETE /repos/{owner}/{repo}/comments/{comment_id}/reactions/{reaction_id}write
PUT /repos/{owner}/{repo}/contents/{path}write
PUT /repos/{owner}/{repo}/contents/{path}write
DELETE /repos/{owner}/{repo}/contents/{path}write
DELETE /repos/{owner}/{repo}/contents/{path}write
POST /repos/{owner}/{repo}/dependency-graph/snapshotswrite
POST /repos/{owner}/{repo}/dispatcheswrite
POST /repos/{owner}/{repo}/git/blobswrite
POST /repos/{owner}/{repo}/git/commitswrite
POST /repos/{owner}/{repo}/git/refswrite
POST /repos/{owner}/{repo}/git/refswrite
PATCH /repos/{owner}/{repo}/git/refs/{ref}write
PATCH /repos/{owner}/{repo}/git/refs/{ref}write
DELETE /repos/{owner}/{repo}/git/refs/{ref}write
POST /repos/{owner}/{repo}/git/tagswrite
POST /repos/{owner}/{repo}/git/treeswrite
PUT /repos/{owner}/{repo}/importwrite
PATCH /repos/{owner}/{repo}/importwrite
DELETE /repos/{owner}/{repo}/importwrite
PATCH /repos/{owner}/{repo}/import/authors/{author_id}write
PATCH /repos/{owner}/{repo}/import/lfswrite
POST /repos/{owner}/{repo}/merge-upstreamwrite
POST /repos/{owner}/{repo}/mergeswrite
PUT /repos/{owner}/{repo}/pulls/{pull_number}/mergewrite
POST /repos/{owner}/{repo}/releaseswrite
POST /repos/{owner}/{repo}/releaseswrite
PATCH /repos/{owner}/{repo}/releases/assets/{asset_id}write
DELETE /repos/{owner}/{repo}/releases/assets/{asset_id}write
POST /repos/{owner}/{repo}/releases/generate-noteswrite
PATCH /repos/{owner}/{repo}/releases/{release_id}write
DELETE /repos/{owner}/{repo}/releases/{release_id}write
POST /repos/{owner}/{repo}/secret-scanning/push-protection-bypasseswrite
GET /repos/{owner}/{repo}/activityread
GET /repos/{owner}/{repo}/branchesread
GET /repos/{owner}/{repo}/branches/{branch}read
GET /repos/{owner}/{repo}/code-scanning/codeql/databasesread
GET /repos/{owner}/{repo}/code-scanning/codeql/databases/{language}read
GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}read
GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}/repos/{repo_owner}/{repo_name}read
GET /repos/{owner}/{repo}/codeowners/errorsread
GET /repos/{owner}/{repo}/commitsread
GET /repos/{owner}/{repo}/commits/{commit_sha}/branches-where-headread
POST /repos/{owner}/{repo}/commits/{commit_sha}/commentsread
GET /repos/{owner}/{repo}/commits/{ref}read
GET /repos/{owner}/{repo}/community/profileread
GET /repos/{owner}/{repo}/compare/{basehead}read
GET /repos/{owner}/{repo}/contents/{path}read
GET /repos/{owner}/{repo}/dependency-graph/compare/{basehead}read
GET /repos/{owner}/{repo}/dependency-graph/sbomread
POST /repos/{owner}/{repo}/forksread
GET /repos/{owner}/{repo}/git/blobs/{file_sha}read
GET /repos/{owner}/{repo}/git/commits/{commit_sha}read
GET /repos/{owner}/{repo}/git/matching-refs/{ref}read
GET /repos/{owner}/{repo}/git/ref/{ref}read
GET /repos/{owner}/{repo}/git/tags/{tag_sha}read
GET /repos/{owner}/{repo}/git/trees/{tree_sha}read
GET /repos/{owner}/{repo}/importread
GET /repos/{owner}/{repo}/import/authorsread
GET /repos/{owner}/{repo}/import/large_filesread
GET /repos/{owner}/{repo}/pulls/{pull_number}read
GET /repos/{owner}/{repo}/releasesread
GET /repos/{owner}/{repo}/releases/assets/{asset_id}read
GET /repos/{owner}/{repo}/releases/latestread
GET /repos/{owner}/{repo}/releases/tags/{tag}read
GET /repos/{owner}/{repo}/releases/{release_id}read
GET /repos/{owner}/{repo}/releases/{release_id}/assetsread
GET /repos/{owner}/{repo}/tarball/{ref}read
GET /repos/{owner}/{repo}/zipball/{ref}read

Repository permissions for "Custom properties"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/properties/valueswrite

Repository permissions for "Dependabot alerts"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}write
GET /orgs/{org}/dependabot/alertsread
GET /repos/{owner}/{repo}/dependabot/alertsread
GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number}read

Repository permissions for "Dependabot secrets"

EndpointAccessAdditional permissions
PUT /repos/{owner}/{repo}/dependabot/secrets/{secret_name}write
DELETE /repos/{owner}/{repo}/dependabot/secrets/{secret_name}write
GET /repos/{owner}/{repo}/dependabot/secretsread
GET /repos/{owner}/{repo}/dependabot/secrets/public-keyread
GET /repos/{owner}/{repo}/dependabot/secrets/{secret_name}read

Repository permissions for "Deployments"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/deploymentswrite
DELETE /repos/{owner}/{repo}/deployments/{deployment_id}write
POST /repos/{owner}/{repo}/deployments/{deployment_id}/statuseswrite
POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deploymentsread
GET /repos/{owner}/{repo}/deploymentsread
GET /repos/{owner}/{repo}/deployments/{deployment_id}read
GET /repos/{owner}/{repo}/deployments/{deployment_id}/statusesread
GET /repos/{owner}/{repo}/deployments/{deployment_id}/statuses/{status_id}read

Repository permissions for "Environments"

EndpointAccessAdditional permissions
PUT /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}write
DELETE /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}write
POST /repos/{owner}/{repo}/environments/{environment_name}/variableswrite
PATCH /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}write
DELETE /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}write
GET /repos/{owner}/{repo}/environments/{environment_name}/secretsread
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/public-keyread
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}read
GET /repos/{owner}/{repo}/environments/{environment_name}/variablesread
GET /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}read

Repository permissions for "Issues"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/issueswrite
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}write
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}write
POST /repos/{owner}/{repo}/issues/comments/{comment_id}/reactionswrite
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}/reactions/{reaction_id}write
PATCH /repos/{owner}/{repo}/issues/{issue_number}write
POST /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/commentswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
PUT /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}write
PUT /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
POST /repos/{owner}/{repo}/issues/{issue_number}/reactionswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/reactions/{reaction_id}write
POST /repos/{owner}/{repo}/labelswrite
PATCH /repos/{owner}/{repo}/labels/{name}write
DELETE /repos/{owner}/{repo}/labels/{name}write
POST /repos/{owner}/{repo}/milestoneswrite
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}write
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}write
GET /repos/{owner}/{repo}/assigneesread
GET /repos/{owner}/{repo}/assignees/{assignee}read
GET /repos/{owner}/{repo}/issuesread
GET /repos/{owner}/{repo}/issues/commentsread
GET /repos/{owner}/{repo}/issues/comments/{comment_id}read
GET /repos/{owner}/{repo}/issues/comments/{comment_id}/reactionsread
GET /repos/{owner}/{repo}/issues/eventsread
GET /repos/{owner}/{repo}/issues/events/{event_id}read
GET /repos/{owner}/{repo}/issues/{issue_number}read
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}read
GET /repos/{owner}/{repo}/issues/{issue_number}/commentsread
GET /repos/{owner}/{repo}/issues/{issue_number}/eventsread
GET /repos/{owner}/{repo}/issues/{issue_number}/labelsread
GET /repos/{owner}/{repo}/issues/{issue_number}/reactionsread
GET /repos/{owner}/{repo}/issues/{issue_number}/timelineread
GET /repos/{owner}/{repo}/labelsread
GET /repos/{owner}/{repo}/labels/{name}read
GET /repos/{owner}/{repo}/milestonesread
GET /repos/{owner}/{repo}/milestones/{milestone_number}read
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labelsread

Repository permissions for "Metadata"

EndpointAccessAdditional permissions
GET /notificationsread
PUT /orgs/{org}/actions/permissions/repositories/{repository_id}read
DELETE /orgs/{org}/actions/permissions/repositories/{repository_id}read
PUT /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}read
DELETE /orgs/{org}/actions/runner-groups/{runner_group_id}/repositories/{repository_id}read
PUT /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}read
DELETE /orgs/{org}/actions/secrets/{secret_name}/repositories/{repository_id}read
PUT /orgs/{org}/actions/variables/{name}/repositories/{repository_id}read
DELETE /orgs/{org}/actions/variables/{name}/repositories/{repository_id}read
PUT /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}read
DELETE /orgs/{org}/codespaces/secrets/{secret_name}/repositories/{repository_id}read
PUT /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}read
DELETE /orgs/{org}/dependabot/secrets/{secret_name}/repositories/{repository_id}read
GET /orgs/{org}/reposread
GET /repos/{owner}/{repo}read
GET /repos/{owner}/{repo}/collaboratorsread
GET /repos/{owner}/{repo}/collaborators/{username}read
GET /repos/{owner}/{repo}/collaborators/{username}/permissionread
GET /repos/{owner}/{repo}/commentsread
GET /repos/{owner}/{repo}/comments/{comment_id}read
GET /repos/{owner}/{repo}/comments/{comment_id}/reactionsread
GET /repos/{owner}/{repo}/commits/{commit_sha}/commentsread
GET /repos/{owner}/{repo}/contributorsread
GET /repos/{owner}/{repo}/eventsread
GET /repos/{owner}/{repo}/forksread
GET /repos/{owner}/{repo}/languagesread
GET /repos/{owner}/{repo}/licenseread
GET /repos/{owner}/{repo}/private-vulnerability-reportingread
GET /repos/{owner}/{repo}/properties/valuesread
GET /repos/{owner}/{repo}/rules/branches/{branch}read
GET /repos/{owner}/{repo}/rulesetsread
GET /repos/{owner}/{repo}/rulesets/{ruleset_id}read
GET /repos/{owner}/{repo}/stargazersread
GET /repos/{owner}/{repo}/stats/code_frequencyread
GET /repos/{owner}/{repo}/stats/commit_activityread
GET /repos/{owner}/{repo}/stats/contributorsread
GET /repos/{owner}/{repo}/stats/participationread
GET /repos/{owner}/{repo}/stats/punch_cardread
GET /repos/{owner}/{repo}/subscribersread
GET /repos/{owner}/{repo}/tagsread
GET /repos/{owner}/{repo}/topicsread
GET /repositoriesread
GET /search/labelsread
PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}read
DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}read
GET /user/installations/{installation_id}/repositoriesread
GET /user/reposread
GET /user/starred/{owner}/{repo}read
PUT /user/starred/{owner}/{repo}read
DELETE /user/starred/{owner}/{repo}read
GET /users/{username}/reposread

Repository permissions for "Pages"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/pageswrite
PUT /repos/{owner}/{repo}/pageswrite
DELETE /repos/{owner}/{repo}/pageswrite
POST /repos/{owner}/{repo}/pages/buildswrite
POST /repos/{owner}/{repo}/pages/deploymentswrite
POST /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}/cancelwrite
GET /repos/{owner}/{repo}/pages/healthwrite
GET /repos/{owner}/{repo}/pagesread
GET /repos/{owner}/{repo}/pages/buildsread
GET /repos/{owner}/{repo}/pages/builds/latestread
GET /repos/{owner}/{repo}/pages/builds/{build_id}read
GET /repos/{owner}/{repo}/pages/deployments/{pages_deployment_id}read

Repository permissions for "Projects"

EndpointAccessAdditional permissions
PATCH /projects/columns/cards/{card_id}write
DELETE /projects/columns/cards/{card_id}write
POST /projects/columns/cards/{card_id}/moveswrite
PATCH /projects/columns/{column_id}write
DELETE /projects/columns/{column_id}write
POST /projects/columns/{column_id}/cardswrite
POST /projects/columns/{column_id}/moveswrite
PATCH /projects/{project_id}write
DELETE /projects/{project_id}write
GET /projects/{project_id}/collaboratorswrite
PUT /projects/{project_id}/collaborators/{username}write
DELETE /projects/{project_id}/collaborators/{username}write
GET /projects/{project_id}/collaborators/{username}/permissionwrite
POST /projects/{project_id}/columnswrite
POST /repos/{owner}/{repo}/projectswrite
GET /projects/columns/cards/{card_id}read
GET /projects/columns/{column_id}read
GET /projects/columns/{column_id}/cardsread
GET /projects/{project_id}read
GET /projects/{project_id}/columnsread
GET /repos/{owner}/{repo}/projectsread

Repository permissions for "Pull requests"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/issues/comments/{comment_id}write
DELETE /repos/{owner}/{repo}/issues/comments/{comment_id}write
PATCH /repos/{owner}/{repo}/issues/{issue_number}write
POST /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/assigneeswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/commentswrite
POST /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
PUT /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labelswrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/labels/{name}write
PUT /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
DELETE /repos/{owner}/{repo}/issues/{issue_number}/lockwrite
POST /repos/{owner}/{repo}/labelswrite
PATCH /repos/{owner}/{repo}/labels/{name}write
DELETE /repos/{owner}/{repo}/labels/{name}write
POST /repos/{owner}/{repo}/milestoneswrite
PATCH /repos/{owner}/{repo}/milestones/{milestone_number}write
DELETE /repos/{owner}/{repo}/milestones/{milestone_number}write
POST /repos/{owner}/{repo}/pullswrite
PATCH /repos/{owner}/{repo}/pulls/comments/{comment_id}write
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}write
POST /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactionswrite
DELETE /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactions/{reaction_id}write
PATCH /repos/{owner}/{repo}/pulls/{pull_number}write
POST /repos/{owner}/{repo}/pulls/{pull_number}/commentswrite
POST /repos/{owner}/{repo}/pulls/{pull_number}/comments/{comment_id}/replieswrite
POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewerswrite
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewerswrite
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviewswrite
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}write
DELETE /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}write
PUT /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/dismissalswrite
POST /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/eventswrite
PUT /repos/{owner}/{repo}/pulls/{pull_number}/update-branchwrite
GET /repos/{owner}/{repo}/assigneesread
GET /repos/{owner}/{repo}/assignees/{assignee}read
GET /repos/{owner}/{repo}/commits/{commit_sha}/pullsread
GET /repos/{owner}/{repo}/issues/commentsread
GET /repos/{owner}/{repo}/issues/comments/{comment_id}read
GET /repos/{owner}/{repo}/issues/events/{event_id}read
GET /repos/{owner}/{repo}/issues/{issue_number}/assignees/{assignee}read
GET /repos/{owner}/{repo}/issues/{issue_number}/commentsread
GET /repos/{owner}/{repo}/issues/{issue_number}/eventsread
GET /repos/{owner}/{repo}/issues/{issue_number}/labelsread
GET /repos/{owner}/{repo}/issues/{issue_number}/timelineread
GET /repos/{owner}/{repo}/labelsread
GET /repos/{owner}/{repo}/labels/{name}read
GET /repos/{owner}/{repo}/milestonesread
GET /repos/{owner}/{repo}/milestones/{milestone_number}read
GET /repos/{owner}/{repo}/milestones/{milestone_number}/labelsread
GET /repos/{owner}/{repo}/pullsread
GET /repos/{owner}/{repo}/pulls/commentsread
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}read
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}/reactionsread
GET /repos/{owner}/{repo}/pulls/{pull_number}read
GET /repos/{owner}/{repo}/pulls/{pull_number}/commentsread
GET /repos/{owner}/{repo}/pulls/{pull_number}/commitsread
GET /repos/{owner}/{repo}/pulls/{pull_number}/filesread
GET /repos/{owner}/{repo}/pulls/{pull_number}/mergeread
GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewersread
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviewsread
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}read
GET /repos/{owner}/{repo}/pulls/{pull_number}/reviews/{review_id}/commentsread

Repository permissions for "Repository security advisories"

EndpointAccessAdditional permissions
GET /orgs/{org}/security-advisorieswrite
POST /repos/{owner}/{repo}/security-advisorieswrite
POST /repos/{owner}/{repo}/security-advisories/reportswrite
PATCH /repos/{owner}/{repo}/security-advisories/{ghsa_id}write
POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/cvewrite
GET /repos/{owner}/{repo}/security-advisoriesread
GET /repos/{owner}/{repo}/security-advisories/{ghsa_id}read
POST /repos/{owner}/{repo}/security-advisories/{ghsa_id}/forksread

Repository permissions for "Secret scanning alerts"

EndpointAccessAdditional permissions
PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}write
GET /orgs/{org}/secret-scanning/alertsread
GET /repos/{owner}/{repo}/secret-scanning/alertsread
GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}read
GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locationsread

Repository permissions for "Secrets"

EndpointAccessAdditional permissions
PUT /repos/{owner}/{repo}/actions/secrets/{secret_name}write
DELETE /repos/{owner}/{repo}/actions/secrets/{secret_name}write
PUT /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}write
DELETE /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}write
GET /repos/{owner}/{repo}/actions/organization-secretsread
GET /repos/{owner}/{repo}/actions/secretsread
GET /repos/{owner}/{repo}/actions/secrets/public-keyread
GET /repos/{owner}/{repo}/actions/secrets/{secret_name}read
GET /repos/{owner}/{repo}/environments/{environment_name}/secretsread
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/public-keyread
GET /repos/{owner}/{repo}/environments/{environment_name}/secrets/{secret_name}read

Repository permissions for "Variables"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/actions/variableswrite
PATCH /repos/{owner}/{repo}/actions/variables/{name}write
DELETE /repos/{owner}/{repo}/actions/variables/{name}write
POST /repos/{owner}/{repo}/environments/{environment_name}/variableswrite
PATCH /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}write
DELETE /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}write
GET /repos/{owner}/{repo}/actions/organization-variablesread
GET /repos/{owner}/{repo}/actions/variablesread
GET /repos/{owner}/{repo}/actions/variables/{name}read
GET /repos/{owner}/{repo}/environments/{environment_name}/variablesread
GET /repos/{owner}/{repo}/environments/{environment_name}/variables/{name}read

Repository permissions for "Webhooks"

EndpointAccessAdditional permissions
POST /repos/{owner}/{repo}/hookswrite
PATCH /repos/{owner}/{repo}/hooks/{hook_id}write
DELETE /repos/{owner}/{repo}/hooks/{hook_id}write
PATCH /repos/{owner}/{repo}/hooks/{hook_id}/configwrite
POST /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}/attemptswrite
GET /repos/{owner}/{repo}/hooksread
GET /repos/{owner}/{repo}/hooks/{hook_id}read
GET /repos/{owner}/{repo}/hooks/{hook_id}/configread
GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveriesread
GET /repos/{owner}/{repo}/hooks/{hook_id}/deliveries/{delivery_id}read
POST /repos/{owner}/{repo}/hooks/{hook_id}/pingsread
POST /repos/{owner}/{repo}/hooks/{hook_id}/testsread

Repository permissions for "Workflows"

EndpointAccessAdditional permissions
PUT /repos/{owner}/{repo}/contents/{path}write
DELETE /repos/{owner}/{repo}/contents/{path}write
POST /repos/{owner}/{repo}/git/refswrite
PATCH /repos/{owner}/{repo}/git/refs/{ref}write
POST /repos/{owner}/{repo}/releaseswrite

User permissions for "Block another user"

EndpointAccessAdditional permissions
PUT /user/blocks/{username}write
DELETE /user/blocks/{username}write
GET /user/blocksread
GET /user/blocks/{username}read

User permissions for "Codespaces user secrets"

EndpointAccessAdditional permissions
PUT /user/codespaces/secrets/{secret_name}write
DELETE /user/codespaces/secrets/{secret_name}write
PUT /user/codespaces/secrets/{secret_name}/repositorieswrite
PUT /user/codespaces/secrets/{secret_name}/repositories/{repository_id}write
DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}write
GET /user/codespaces/secretsread
GET /user/codespaces/secrets/public-keyread
GET /user/codespaces/secrets/{secret_name}read
GET /user/codespaces/secrets/{secret_name}/repositoriesread

User permissions for "Email addresses"

EndpointAccessAdditional permissions
PATCH /user/email/visibilitywrite
POST /user/emailswrite
DELETE /user/emailswrite
GET /user/emailsread
GET /user/public_emailsread

User permissions for "Followers"

EndpointAccessAdditional permissions
PUT /user/following/{username}write
DELETE /user/following/{username}write
GET /user/followersread
GET /user/followingread
GET /user/following/{username}read

User permissions for "GPG keys"

EndpointAccessAdditional permissions
POST /user/gpg_keyswrite
DELETE /user/gpg_keys/{gpg_key_id}write
GET /user/gpg_keysread
GET /user/gpg_keys/{gpg_key_id}read

User permissions for "Gists"

EndpointAccessAdditional permissions
POST /gistswrite
PATCH /gists/{gist_id}write
DELETE /gists/{gist_id}write
POST /gists/{gist_id}/commentswrite
PATCH /gists/{gist_id}/comments/{comment_id}write
DELETE /gists/{gist_id}/comments/{comment_id}write
POST /gists/{gist_id}/forkswrite
PUT /gists/{gist_id}/starwrite
DELETE /gists/{gist_id}/starwrite

User permissions for "Git SSH keys"

EndpointAccessAdditional permissions
POST /user/keyswrite
DELETE /user/keys/{key_id}write
GET /user/keysread
GET /user/keys/{key_id}read
GET /users/{username}/keysread

User permissions for "Interaction limits"

EndpointAccessAdditional permissions
PUT /user/interaction-limitswrite
DELETE /user/interaction-limitswrite
GET /user/interaction-limitsread

User permissions for "Notifications"

EndpointAccessAdditional permissions
GET /notificationsread

User permissions for "Plan"

EndpointAccessAdditional permissions
GET /users/{username}/settings/billing/actionsread
GET /users/{username}/settings/billing/packagesread
GET /users/{username}/settings/billing/shared-storageread

User permissions for "Profile"

EndpointAccessAdditional permissions
PATCH /userwrite
POST /user/social_accountswrite
DELETE /user/social_accountswrite

User permissions for "SSH signing keys"

EndpointAccessAdditional permissions
POST /user/ssh_signing_keyswrite
DELETE /user/ssh_signing_keys/{ssh_signing_key_id}write
GET /user/ssh_signing_keysread
GET /user/ssh_signing_keys/{ssh_signing_key_id}read

User permissions for "Starring"

EndpointAccessAdditional permissions
PUT /user/starred/{owner}/{repo}write
DELETE /user/starred/{owner}/{repo}write
GET /user/starredread
GET /user/starred/{owner}/{repo}read
GET /users/{username}/starredread

User permissions for "Watching"

EndpointAccessAdditional permissions
GET /user/subscriptionsread
GET /users/{username}/subscriptionsread