GitHub
Restrict how your agents can use GitHub.
Require agents to confirm every push, or set up custom rules for automation.
GitHubRelease bot · acme-inckc_…9a04
| Permission | Access | Repositories | Only when |
|---|---|---|---|
Contents · Read contents.read | Allowed | acme/api | Any request |
Contents · Push contents.push | Allowed | acme/api | git.ref starts with refs/heads/agent/ git.force = false |
Pull requests · Create pulls.create | Allowed | acme/api | Any request |
Pull requests · Merge pulls.merge | Ask meWaits up to 24 hours | acme/api | Any request |
Issues · Read issues.read | Allowed | acme/* | Any request |
Allowed goes straight throughAsk me waits for your confirmation
What you can control
Permissions
Each row of a key's GitHub access is one of these, set to Allowed or Ask me.
| Permission | Name in the API |
|---|---|
| Contents · Read | contents.read |
| Contents · Push | contents.push |
| Issues · Read | issues.read |
| Issues · Create | issues.create |
| Comments · Read | comments.read |
| Comments · Create | comments.create |
| Pull requests · Read | pulls.read |
| Pull requests · Create | pulls.create |
| Pull requests · Merge | pulls.merge |
| Actions · Read | actions.read |
| Actions · Run | actions.run |
| Repositories · List | repositories.list |
| Organizations · Read | orgs.read |
| Custom rule: a method or git action (git fetch or git push) and a path that you choose. | |