GitHub App Permissions

• Metadata permissions
• Permission on "administration"
• Permission on "blocking"
• Permission on "checks"
• Permission on "contents"
• Permission on "deployments"
• Permission on "emails"
• Permission on "followers"
• Permission on "gpg keys"
• Permission on "issues"
• Permission on "keys"
• Permission on "members"
• Permission on "organization administration"
• Permission on "organization hooks"
• Permission on "organization projects"
• Permission on "organization user blocking"
• Permission on "packages"
• Permission on "pages"
• Permission on "pull requests"
• Permission on "repository hooks"
• Permission on "repository projects"
• Permission on "single file"
• Permission on "starring"
• Permission on "statuses"
• Permission on "team discussions"

GitHub Apps are created with a set of permissions. These define what resources the GitHub App can access via the API. For more information, see "Permissions for GitHub Apps."

Metadata permissions

These permissions are enabled for every app. These permissions are a collection of read only endpoints for accessing metadata for various resources that do not leak sensitive private repository information.

• GET /
• GET /codes_of_conduct
• GET /codes_of_conduct/:key
• GET /emojis
• GET /feeds
• GET /licenses
• GET /licenses/:key
• POST /markdown
• POST /markdown/raw
• GET /meta
• GET /organizations
• GET /orgs/:org
• GET /orgs/:org/projects
• GET /orgs/:org/repos
• GET /rate_limit

• GET /repos/:owner/:repo

• GET /repos/:owner/:repo/community/profile

• GET /repos/:owner/:repo/contributors

• GET /repos/:owner/:repo/forks
• GET /repos/:owner/:repo/languages
• GET /repos/:owner/:repo/license
• GET /repos/:owner/:repo/stargazers
• GET /repos/:owner/:repo/stats/code_frequency
• GET /repos/:owner/:repo/stats/commit_activity
• GET /repos/:owner/:repo/stats/contributors
• GET /repos/:owner/:repo/stats/participation
• GET /repos/:owner/:repo/stats/punch_card
• GET /repos/:owner/:repo/subscribers
• GET /repos/:owner/:repo/tags
• GET /repos/:owner/:repo/topics
• GET /repositories

• GET /user/repos

• GET /user/starred

• GET /user/subscriptions

• GET /users

• GET /users/:username
• GET /users/:username/followers
• GET /users/:username/following
• GET /users/:username/following/:target_user
• GET /users/:username/gpg_keys
• GET /users/:username/orgs
• GET /users/:username/received_events
• GET /users/:username/received_events/public

• GET /users/:username/repos

• GET /users/:username/starred

• GET /users/:username/subscriptions

Collaborators

• GET /repos/:owner/:repo/collaborators
• GET /repos/:owner/:repo/collaborators/:username

Commit comments

• GET /repos/:owner/:repo/comments
• GET /repos/:owner/:repo/comments/:comment_id
• GET /repos/:owner/:repo/comments/:comment_id/reactions
• GET /repos/:owner/:repo/commits/:sha/comments

Events

• GET /events
• GET /networks/:owner/:repo/events
• GET /orgs/:org/events
• GET /repos/:owner/:repo/events
• GET /users/:username/events
• GET /users/:username/events/public

Git

• GET /gitignore/templates
• GET /gitignore/templates/:key

Keys

• GET /users/:username/keys

Organization members

• GET /orgs/:org/members
• GET /orgs/:org/members/:username
• GET /orgs/:org/public_members
• GET /orgs/:org/public_members/:username

Search

• GET /search/code
• GET /search/commits

• GET /search/issues

• GET /search/labels

• GET /search/repositories

• GET /search/topics

• GET /search/users

Permission on "administration"

• POST /orgs/:org/repos (:write)
• PATCH /repos/:owner/:repo (:write)
• DELETE /repos/:owner/:repo (:write)
• POST /repos/:owner/:repo/forks (:write)

• PUT /repos/:owner/:repo/topics (:write)

• POST /repos/:owner/:repo/transfer (:write)

• POST /user/repos (:write)

• PATCH /user/repository_invitations/:invitation_id (:write)
• DELETE /user/repository_invitations/:invitation_id (:write)

Branches

• GET /repos/:owner/:repo/branches/:branch/protection (:read)
• PUT /repos/:owner/:repo/branches/:branch/protection (:write)
• DELETE /repos/:owner/:repo/branches/:branch/protection (:write)
• GET /repos/:owner/:repo/branches/:branch/protection/enforce_admins (:read)
• POST /repos/:owner/:repo/branches/:branch/protection/enforce_admins (:write)
• DELETE /repos/:owner/:repo/branches/:branch/protection/enforce_admins (:write)
• GET /repos/:owner/:repo/branches/:branch/protection/required_pull_request_reviews (:read)
• PATCH /repos/:owner/:repo/branches/:branch/protection/required_pull_request_reviews (:write)

• DELETE /repos/:owner/:repo/branches/:branch/protection/required_pull_request_reviews (:write)

• GET /repos/:owner/:repo/branches/:branch/protection/required_signatures (:read)

• POST /repos/:owner/:repo/branches/:branch/protection/required_signatures (:write)

• DELETE /repos/:owner/:repo/branches/:branch/protection/required_signatures (:write)

• GET /repos/:owner/:repo/branches/:branch/protection/required_status_checks (:read)

• PATCH /repos/:owner/:repo/branches/:branch/protection/required_status_checks (:write)
• DELETE /repos/:owner/:repo/branches/:branch/protection/required_status_checks (:write)
• GET /repos/:owner/:repo/branches/:branch/protection/required_status_checks/contexts (:read)
• POST /repos/:owner/:repo/branches/:branch/protection/required_status_checks/contexts (:write)
• PUT /repos/:owner/:repo/branches/:branch/protection/required_status_checks/contexts (:write)
• DELETE /repos/:owner/:repo/branches/:branch/protection/required_status_checks/contexts (:write)
• GET /repos/:owner/:repo/branches/:branch/protection/restrictions (:read)
• DELETE /repos/:owner/:repo/branches/:branch/protection/restrictions (:write)
• GET /repos/:owner/:repo/branches/:branch/protection/restrictions/teams (:read)
• POST /repos/:owner/:repo/branches/:branch/protection/restrictions/teams (:write)
• PUT /repos/:owner/:repo/branches/:branch/protection/restrictions/teams (:write)
• DELETE /repos/:owner/:repo/branches/:branch/protection/restrictions/teams (:write)
• GET /repos/:owner/:repo/branches/:branch/protection/restrictions/users (:read)
• POST /repos/:owner/:repo/branches/:branch/protection/restrictions/users (:write)
• PUT /repos/:owner/:repo/branches/:branch/protection/restrictions/users (:write)
• DELETE /repos/:owner/:repo/branches/:branch/protection/restrictions/users (:write)

Collaborators

• PUT /repos/:owner/:repo/collaborators/:username (:write)
• DELETE /repos/:owner/:repo/collaborators/:username (:write)

Invitations

• GET /repos/:owner/:repo/invitations (:read)
• PATCH /repos/:owner/:repo/invitations/:invitation_id (:write)
• DELETE /repos/:owner/:repo/invitations/:invitation_id (:write)

Keys

• GET /repos/:owner/:repo/keys (:read)
• POST /repos/:owner/:repo/keys (:write)
• GET /repos/:owner/:repo/keys/:key_id (:read)
• DELETE /repos/:owner/:repo/keys/:key_id (:write)

Teams

• GET /repos/:owner/:repo/teams (:read)
• PUT /teams/:team_id/repos/:owner/:repo (:write)
• DELETE /teams/:team_id/repos/:owner/:repo (:write)

Traffic

• GET /repos/:owner/:repo/traffic/clones (:read)
• GET /repos/:owner/:repo/traffic/popular/paths (:read)
• GET /repos/:owner/:repo/traffic/popular/referrers (:read)
• GET /repos/:owner/:repo/traffic/views (:read)

Permission on "blocking"

• GET /user/blocks (:read)
• GET /user/blocks/:username (:read)
• PUT /user/blocks/:username (:write)
• DELETE /user/blocks/:username (:write)

Permission on "checks"

• POST /repos/:owner/:repo/check-runs (:write)
• GET /repos/:owner/:repo/check-runs/:check_run_id (:read)
• PATCH /repos/:owner/:repo/check-runs/:check_run_id (:write)
• GET /repos/:owner/:repo/check-runs/:check_run_id/annotations (:read)
• POST /repos/:owner/:repo/check-suites (:write)
• GET /repos/:owner/:repo/check-suites/:check_suite_id (:read)

• GET /repos/:owner/:repo/check-suites/:check_suite_id/check-runs (:read)

• POST /repos/:owner/:repo/check-suites/:check_suite_id/rerequest (:write)

• PATCH /repos/:owner/:repo/check-suites/preferences (:write)

• GET /repos/:owner/:repo/commits/:sha/check-runs (:read)
• GET /repos/:owner/:repo/commits/:sha/check-suites (:read)

Permission on "contents"

• DELETE /reactions/:reaction_id (:read)

• GET /repos/:owner/:repo/:archive_format/:ref (:read)

• GET /repos/:owner/:repo/check-runs/:check_run_id (:read)

• GET /repos/:owner/:repo/check-runs/:check_run_id/annotations (:read)

• GET /repos/:owner/:repo/check-suites/:check_suite_id (:read)

• GET /repos/:owner/:repo/check-suites/:check_suite_id/check-runs (:read)

• POST /repos/:owner/:repo/check-suites/:check_suite_id/rerequest (:write)

• GET /repos/:owner/:repo/commits (:read)

• GET /repos/:owner/:repo/commits/:sha (:read)

• GET /repos/:owner/:repo/commits/:sha/check-runs (:read)

• GET /repos/:owner/:repo/commits/:sha/check-suites (:read)

• GET /repos/:owner/:repo/community/code_of_conduct (:read)

• GET /repos/:owner/:repo/compare/:base...:head (:read)
• GET /repos/:owner/:repo/contents/:path (:read)
• POST /repos/:owner/:repo/forks (:read)
• POST /repos/:owner/:repo/merges (:write)
• PUT /repos/:owner/:repo/pulls/:pull_number/merge (:write)

Branches

• GET /repos/:owner/:repo/branches (:read)
• GET /repos/:owner/:repo/branches/:branch (:read)

Commit comments

• PATCH /repos/:owner/:repo/comments/:comment_id (:write)
• DELETE /repos/:owner/:repo/comments/:comment_id (:write)
• POST /repos/:owner/:repo/comments/:comment_id/reactions (:read)
• POST /repos/:owner/:repo/commits/:sha/comments (:read)

Git

• POST /repos/:owner/:repo/git/blobs (:write)
• GET /repos/:owner/:repo/git/blobs/:sha (:read)
• POST /repos/:owner/:repo/git/commits (:write)
• GET /repos/:owner/:repo/git/commits/:commit_id (:read)
• GET /repos/:owner/:repo/git/refs (:read)
• POST /repos/:owner/:repo/git/refs (:write)
• GET /repos/:owner/:repo/git/refs/:ref (:read)
• PATCH /repos/:owner/:repo/git/refs/:ref (:write)
• DELETE /repos/:owner/:repo/git/refs/:ref (:write)
• POST /repos/:owner/:repo/git/tags (:write)
• GET /repos/:owner/:repo/git/tags/:tag_id (:read)
• POST /repos/:owner/:repo/git/trees (:write)
• GET /repos/:owner/:repo/git/trees/:sha (:read)

Import

• GET /repos/:owner/:repo/import (:read)
• PUT /repos/:owner/:repo/import (:write)
• PATCH /repos/:owner/:repo/import (:write)
• DELETE /repos/:owner/:repo/import (:write)
• GET /repos/:owner/:repo/import/authors (:read)
• PATCH /repos/:owner/:repo/import/authors/:author_id (:write)
• GET /repos/:owner/:repo/import/large_files (:read)
• PATCH /repos/:owner/:repo/import/lfs (:write)

Releases

• GET /repos/:owner/:repo/releases (:read)
• POST /repos/:owner/:repo/releases (:write)
• GET /repos/:owner/:repo/releases/:release_id (:read)
• PATCH /repos/:owner/:repo/releases/:release_id (:write)
• DELETE /repos/:owner/:repo/releases/:release_id (:write)
• GET /repos/:owner/:repo/releases/:release_id/assets (:read)
• GET /repos/:owner/:repo/releases/assets/:asset_id (:read)
• PATCH /repos/:owner/:repo/releases/assets/:asset_id (:write)
• DELETE /repos/:owner/:repo/releases/assets/:asset_id (:write)
• GET /repos/:owner/:repo/releases/latest (:read)
• GET /repos/:owner/:repo/releases/tags/:tag (:read)

Permission on "deployments"

• GET /repos/:owner/:repo/deployments (:read)
• POST /repos/:owner/:repo/deployments (:write)
• GET /repos/:owner/:repo/deployments/:deployment_id (:read)
• GET /repos/:owner/:repo/deployments/:deployment_id/statuses (:read)
• POST /repos/:owner/:repo/deployments/:deployment_id/statuses (:write)
• GET /repos/:owner/:repo/deployments/:deployment_id/statuses/:status_id (:read)

Permission on "emails"

• PATCH /user/email/visibility (:write)

• GET /user/emails (:read)

• POST /user/emails (:write)
• DELETE /user/emails (:write)
• GET /user/public_emails (:read)

Permission on "followers"

• GET /user/followers (:read)
• GET /user/following (:read)
• GET /user/following/:username (:read)
• PUT /user/following/:username (:write)
• DELETE /user/following/:username (:write)

Permission on "gpg keys"

• GET /user/gpg_keys (:read)
• POST /user/gpg_keys (:write)
• GET /user/gpg_keys/:gpg_key_id (:read)
• DELETE /user/gpg_keys/:gpg_key_id (:write)

Permission on "issues"

Issues and pull requests are closely related. If your GitHub App has permissions on issues but not on pull requests, these endpoints will be limited to issues. Endpoints that return both issues and pull requests will be filtered. Endpoints that allow operations on both issues and pull requests will be restricted to issues.

• DELETE /reactions/:reaction_id (:write)
• GET /repos/:owner/:repo/issues (:read)
• POST /repos/:owner/:repo/issues (:write)
• GET /repos/:owner/:repo/issues/:issue_number (:read)
• PATCH /repos/:owner/:repo/issues/:issue_number (:write)
• GET /repos/:owner/:repo/issues/:issue_number/comments (:read)
• POST /repos/:owner/:repo/issues/:issue_number/comments (:write)
• PUT /repos/:owner/:repo/issues/:issue_number/lock (:write)
• DELETE /repos/:owner/:repo/issues/:issue_number/lock (:write)
• GET /repos/:owner/:repo/issues/:issue_number/reactions (:read)
• POST /repos/:owner/:repo/issues/:issue_number/reactions (:write)
• GET /repos/:owner/:repo/issues/:issue_number/timeline (:read)
• GET /repos/:owner/:repo/issues/comments (:read)
• GET /repos/:owner/:repo/issues/comments/:comment_id (:read)
• PATCH /repos/:owner/:repo/issues/comments/:comment_id (:write)
• DELETE /repos/:owner/:repo/issues/comments/:comment_id (:write)
• GET /repos/:owner/:repo/issues/comments/:comment_id/reactions (:read)
• POST /repos/:owner/:repo/issues/comments/:comment_id/reactions (:write)

Assignees

• GET /repos/:owner/:repo/assignees (:read)
• GET /repos/:owner/:repo/assignees/:username (:read)
• POST /repos/:owner/:repo/issues/:issue_number/assignees (:write)
• DELETE /repos/:owner/:repo/issues/:issue_number/assignees (:write)

Events

• GET /repos/:owner/:repo/issues/:issue_number/events (:read)
• GET /repos/:owner/:repo/issues/events/:event_id (:read)

Labels

• GET /repos/:owner/:repo/issues/:issue_number/labels (:read)
• POST /repos/:owner/:repo/issues/:issue_number/labels (:write)
• PUT /repos/:owner/:repo/issues/:issue_number/labels (:write)
• DELETE /repos/:owner/:repo/issues/:issue_number/labels (:write)
• DELETE /repos/:owner/:repo/issues/:issue_number/labels/:name (:write)
• GET /repos/:owner/:repo/labels (:read)
• POST /repos/:owner/:repo/labels (:write)
• GET /repos/:owner/:repo/labels/:name (:read)
• PATCH /repos/:owner/:repo/labels/:name (:write)
• DELETE /repos/:owner/:repo/labels/:name (:write)

Milestones

• GET /repos/:owner/:repo/milestones (:read)
• POST /repos/:owner/:repo/milestones (:write)
• GET /repos/:owner/:repo/milestones/:milestone_number (:read)
• PATCH /repos/:owner/:repo/milestones/:milestone_number (:write)
• DELETE /repos/:owner/:repo/milestones/:milestone_number (:write)
• GET /repos/:owner/:repo/milestones/:milestone_number/labels (:read)

Permission on "keys"

Keys

• GET /user/keys (:read)
• POST /user/keys (:write)
• GET /user/keys/:key_id (:read)
• DELETE /user/keys/:key_id (:write)

Permission on "members"

• GET /orgs/:org/outside_collaborators (:read)
• PUT /orgs/:org/outside_collaborators/:username (:write)

• DELETE /orgs/:org/outside_collaborators/:username (:write)

• GET /scim/v2/orgs/:org/Users (:read)

• POST /scim/v2/orgs/:org/Users (:write)

• GET /scim/v2/orgs/:org/Users/:external_identity_guid (:read)

• PUT /scim/v2/orgs/:org/Users/:external_identity_guid (:write)

• PATCH /scim/v2/orgs/:org/Users/:external_identity_guid (:write)

• DELETE /scim/v2/orgs/:org/Users/:external_identity_guid (:write)

• GET /teams/:team_id/discussions (:read)

Invitations

• GET /orgs/:org/invitations (:read)
• POST /orgs/:org/invitations (:write)
• GET /orgs/:org/invitations/:invitation_id/teams (:read)
• GET /teams/:team_id/invitations (:read)

Organization members

• DELETE /orgs/:org/members/:username (:write)
• GET /orgs/:org/memberships/:username (:read)
• PUT /orgs/:org/memberships/:username (:write)
• DELETE /orgs/:org/memberships/:username (:write)
• PUT /orgs/:org/public_members/:username (:write)
• DELETE /orgs/:org/public_members/:username (:write)
• GET /user/memberships/orgs (:read)
• GET /user/memberships/orgs/:org (:read)
• PATCH /user/memberships/orgs/:org (:write)

Team members

• GET /teams/:team_id/members (:read)
• GET /teams/:team_id/memberships/:username (:read)
• PUT /teams/:team_id/memberships/:username (:write)
• DELETE /teams/:team_id/memberships/:username (:write)

Teams

• GET /orgs/:org/teams (:read)
• POST /orgs/:org/teams (:write)
• GET /teams/:team_id (:read)
• PATCH /teams/:team_id (:write)

• DELETE /teams/:team_id (:write)

• GET /teams/:team_id/projects (:read)

• GET /teams/:team_id/projects/:project_id (:read)

• PUT /teams/:team_id/projects/:project_id (:read)

• DELETE /teams/:team_id/projects/:project_id (:read)

• GET /teams/:team_id/repos (:read)

• GET /teams/:team_id/repos/:owner/:repo (:read)
• PUT /teams/:team_id/repos/:owner/:repo (:read)
• DELETE /teams/:team_id/repos/:owner/:repo (:write)
• GET /teams/:team_id/teams (:read)

Permission on "organization administration"

• PATCH /orgs/:org (:write)

Permission on "organization hooks"

• GET /orgs/:org/hooks (:read)
• POST /orgs/:org/hooks (:write)
• GET /orgs/:org/hooks/:hook_id (:read)
• PATCH /orgs/:org/hooks/:hook_id (:write)
• DELETE /orgs/:org/hooks/:hook_id (:write)
• POST /orgs/:org/hooks/:hook_id/pings (:write)

Permission on "organization projects"

• POST /orgs/:org/projects (:write)
• GET /projects/:project_id (:read)
• PATCH /projects/:project_id (:write)
• DELETE /projects/:project_id (:write)
• POST /projects/:project_id/cards (:write)
• GET /projects/:project_id/columns (:read)
• POST /projects/:project_id/columns (:write)
• GET /projects/columns/:column_id (:read)
• PATCH /projects/columns/:column_id (:write)
• DELETE /projects/columns/:column_id (:write)
• GET /projects/columns/:column_id/cards (:read)
• POST /projects/columns/:column_id/cards (:write)
• POST /projects/columns/:column_id/moves (:write)
• GET /projects/columns/cards/:card_id (:read)
• PATCH /projects/columns/cards/:card_id (:write)
• DELETE /projects/columns/cards/:card_id (:write)
• POST /projects/columns/cards/:card_id/moves (:write)

Teams

• DELETE /teams/:team_id/projects/:project_id (:read)

Permission on "organization user blocking"

• GET /orgs/:org/blocks (:read)
• GET /orgs/:org/blocks/:username (:read)
• PUT /orgs/:org/blocks/:username (:write)
• DELETE /orgs/:org/blocks/:username (:write)

Permission on "packages"

Git

• POST /repos/:owner/:repo/git/refs (:write)
• PATCH /repos/:owner/:repo/git/refs/:ref (:write)
• DELETE /repos/:owner/:repo/git/refs/:ref (:write)

Releases

• GET /repos/:owner/:repo/releases (:read)
• POST /repos/:owner/:repo/releases (:write)
• PATCH /repos/:owner/:repo/releases/:release_id (:write)
• DELETE /repos/:owner/:repo/releases/:release_id (:write)
• PATCH /repos/:owner/:repo/releases/assets/:asset_id (:write)
• DELETE /repos/:owner/:repo/releases/assets/:asset_id (:write)

Permission on "pages"

• GET /repos/:owner/:repo/pages (:read)

• PUT /repos/:owner/:repo/pages (:write)

• GET /repos/:owner/:repo/pages/builds (:read)

• POST /repos/:owner/:repo/pages/builds (:write)
• GET /repos/:owner/:repo/pages/builds/:build_id (:read)
• GET /repos/:owner/:repo/pages/builds/latest (:read)

Permission on "pull requests"

Issues and pull requests are closely related. If your GitHub App has permissions on pull requests but not on issues, these endpoints will be limited to pull requests. Endpoints that return both pull requests and issues will be filtered. Endpoints that allow operations on both pull requests and issues will be restricted to pull requests.

• DELETE /reactions/:reaction_id (:write)
• PATCH /repos/:owner/:repo/issues/:issue_number (:write)
• GET /repos/:owner/:repo/issues/:issue_number/comments (:read)
• POST /repos/:owner/:repo/issues/:issue_number/comments (:write)
• PUT /repos/:owner/:repo/issues/:issue_number/lock (:write)
• DELETE /repos/:owner/:repo/issues/:issue_number/lock (:write)
• POST /repos/:owner/:repo/issues/:issue_number/reactions (:write)
• GET /repos/:owner/:repo/issues/:issue_number/timeline (:read)
• GET /repos/:owner/:repo/issues/comments (:read)
• GET /repos/:owner/:repo/issues/comments/:comment_id (:read)
• PATCH /repos/:owner/:repo/issues/comments/:comment_id (:write)
• DELETE /repos/:owner/:repo/issues/comments/:comment_id (:write)
• GET /repos/:owner/:repo/issues/comments/:comment_id/reactions (:read)
• POST /repos/:owner/:repo/issues/comments/:comment_id/reactions (:write)
• GET /repos/:owner/:repo/pulls (:read)
• POST /repos/:owner/:repo/pulls (:write)
• GET /repos/:owner/:repo/pulls/:pull_number (:read)
• PATCH /repos/:owner/:repo/pulls/:pull_number (:write)
• GET /repos/:owner/:repo/pulls/:pull_number/comments (:read)
• POST /repos/:owner/:repo/pulls/:pull_number/comments (:write)
• GET /repos/:owner/:repo/pulls/:pull_number/commits (:read)
• GET /repos/:owner/:repo/pulls/:pull_number/files (:read)
• GET /repos/:owner/:repo/pulls/:pull_number/merge (:read)
• GET /repos/:owner/:repo/pulls/comments (:read)
• GET /repos/:owner/:repo/pulls/comments/:comment_id (:read)
• PATCH /repos/:owner/:repo/pulls/comments/:comment_id (:write)
• DELETE /repos/:owner/:repo/pulls/comments/:comment_id (:write)
• GET /repos/:owner/:repo/pulls/comments/:comment_id/reactions (:read)
• POST /repos/:owner/:repo/pulls/comments/:comment_id/reactions (:write)

Assignees

• GET /repos/:owner/:repo/assignees (:read)
• GET /repos/:owner/:repo/assignees/:username (:read)
• POST /repos/:owner/:repo/issues/:issue_number/assignees (:write)
• DELETE /repos/:owner/:repo/issues/:issue_number/assignees (:write)

Events

• GET /repos/:owner/:repo/issues/:issue_number/events (:read)
• GET /repos/:owner/:repo/issues/events/:event_id (:read)
• POST /repos/:owner/:repo/pulls/:pull_number/reviews/:review_id/events (:write)

Labels

• GET /repos/:owner/:repo/issues/:issue_number/labels (:read)
• POST /repos/:owner/:repo/issues/:issue_number/labels (:write)
• PUT /repos/:owner/:repo/issues/:issue_number/labels (:write)
• DELETE /repos/:owner/:repo/issues/:issue_number/labels (:write)
• DELETE /repos/:owner/:repo/issues/:issue_number/labels/:name (:write)
• GET /repos/:owner/:repo/labels (:read)
• POST /repos/:owner/:repo/labels (:write)
• GET /repos/:owner/:repo/labels/:name (:read)
• PATCH /repos/:owner/:repo/labels/:name (:write)
• DELETE /repos/:owner/:repo/labels/:name (:write)

Milestones

• GET /repos/:owner/:repo/milestones (:read)
• POST /repos/:owner/:repo/milestones (:write)
• GET /repos/:owner/:repo/milestones/:milestone_number (:read)
• PATCH /repos/:owner/:repo/milestones/:milestone_number (:write)
• DELETE /repos/:owner/:repo/milestones/:milestone_number (:write)
• GET /repos/:owner/:repo/milestones/:milestone_number/labels (:read)

Requested reviewers

• GET /repos/:owner/:repo/pulls/:pull_number/requested_reviewers (:read)
• POST /repos/:owner/:repo/pulls/:pull_number/requested_reviewers (:write)
• DELETE /repos/:owner/:repo/pulls/:pull_number/requested_reviewers (:write)

Reviews

• GET /repos/:owner/:repo/pulls/:pull_number/reviews (:read)
• POST /repos/:owner/:repo/pulls/:pull_number/reviews (:write)
• GET /repos/:owner/:repo/pulls/:pull_number/reviews/:review_id (:read)
• DELETE /repos/:owner/:repo/pulls/:pull_number/reviews/:review_id (:write)
• GET /repos/:owner/:repo/pulls/:pull_number/reviews/:review_id/comments (:read)
• PUT /repos/:owner/:repo/pulls/:pull_number/reviews/:review_id/dismissals (:write)

Permission on "repository hooks"

• GET /repos/:owner/:repo/hooks (:read)
• POST /repos/:owner/:repo/hooks (:write)
• GET /repos/:owner/:repo/hooks/:hook_id (:read)
• PATCH /repos/:owner/:repo/hooks/:hook_id (:write)
• DELETE /repos/:owner/:repo/hooks/:hook_id (:write)
• POST /repos/:owner/:repo/hooks/:hook_id/pings (:read)
• POST /repos/:owner/:repo/hooks/:hook_id/tests (:read)

Permission on "repository projects"

• GET /projects/:project_id (:read)
• PATCH /projects/:project_id (:write)
• DELETE /projects/:project_id (:write)
• POST /projects/:project_id/cards (:write)
• GET /projects/:project_id/columns (:read)
• POST /projects/:project_id/columns (:write)
• GET /projects/columns/:column_id (:read)
• PATCH /projects/columns/:column_id (:write)
• DELETE /projects/columns/:column_id (:write)
• GET /projects/columns/:column_id/cards (:read)
• POST /projects/columns/:column_id/cards (:write)
• POST /projects/columns/:column_id/moves (:write)
• GET /projects/columns/cards/:card_id (:read)
• PATCH /projects/columns/cards/:card_id (:write)
• DELETE /projects/columns/cards/:card_id (:write)
• POST /projects/columns/cards/:card_id/moves (:write)
• GET /repos/:owner/:repo/projects (:read)
• POST /repos/:owner/:repo/projects (:write)

Teams

• DELETE /teams/:team_id/projects/:project_id (:read)

Permission on "single file"

• GET /repos/:owner/:repo/contents/:path (:read)
• PUT /repos/:owner/:repo/contents/:path (:write)
• DELETE /repos/:owner/:repo/contents/:path (:write)

Permission on "starring"

• GET /user/starred/:owner/:repo (:read)
• PUT /user/starred/:owner/:repo (:write)
• DELETE /user/starred/:owner/:repo (:write)

Permission on "statuses"

• GET /repos/:owner/:repo/commits/:ref/status (:read)
• GET /repos/:owner/:repo/commits/:ref/statuses (:read)
• POST /repos/:owner/:repo/statuses/:sha (:write)

Permission on "team discussions"

• GET /teams/:team_id/discussions (:read)
• POST /teams/:team_id/discussions (:write)
• GET /teams/:team_id/discussions/:discussion_number (:read)
• PATCH /teams/:team_id/discussions/:discussion_number (:write)
• DELETE /teams/:team_id/discussions/:discussion_number (:write)
• GET /teams/:team_id/discussions/:discussion_number/comments (:read)
• POST /teams/:team_id/discussions/:discussion_number/comments (:write)
• GET /teams/:team_id/discussions/:discussion_number/comments/:comment_number (:read)
• PATCH /teams/:team_id/discussions/:discussion_number/comments/:comment_number (:write)

• DELETE /teams/:team_id/discussions/:discussion_number/comments/:comment_number (:write)

• GET /teams/:team_id/discussions/:discussion_number/comments/:comment_number/reactions (:read)

• POST /teams/:team_id/discussions/:discussion_number/comments/:comment_number/reactions (:write)

• GET /teams/:team_id/discussions/:discussion_number/reactions (:read)

• POST /teams/:team_id/discussions/:discussion_number/reactions (:write)