{"meta":{"title":"GitHub Actions 권한에 대한 REST API 엔드포인트","intro":"REST API를 사용하여 .에 대한 GitHub Actions사용 권한과 상호 작용합니다.","product":"REST API","breadcrumbs":[{"href":"/ko/rest","title":"REST API"},{"href":"/ko/rest/actions","title":"작업"},{"href":"/ko/rest/actions/permissions","title":"사용 권한"}],"documentType":"article"},"body":"# GitHub Actions 권한에 대한 REST API 엔드포인트\n\nREST API를 사용하여 .에 대한 GitHub Actions사용 권한과 상호 작용합니다.\n\n## GitHub Actions에 대한 사용 권한 정보\n\nREST API를 사용하여 실행할 수 있는 엔터프라이즈, 수 있는 작업GitHub Actions 및 재사용 가능한 워크플로에 대한 권한을 설정할 수 있습니다. 자세한 내용은 을 참조[](/ko/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization)[하세요](/ko/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository).\n\n> \\[!NOTE]\n> Most endpoints use `Authorization: Bearer <YOUR-TOKEN>` and `Accept: application/vnd.github+json` headers, plus `X-GitHub-Api-Version: 2026-03-10`. Curl examples below omit these standard headers for brevity.\n\n## Get GitHub Actions permissions for an organization\n\n```\nGET /orgs/{org}/actions/permissions\n```\n\nGets the GitHub Actions permissions policy for repositories and allowed actions and reusable workflows in an organization.\nOAuth tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/actions/permissions\n```\n\n**Response schema (Status: 200):**\n\n* `enabled_repositories`: required, string, enum: `all`, `none`, `selected`\n* `selected_repositories_url`: string\n* `allowed_actions`: string, enum: `all`, `local_only`, `selected`\n* `selected_actions_url`: string\n* `sha_pinning_required`: boolean\n\n## Set GitHub Actions permissions for an organization\n\n```\nPUT /orgs/{org}/actions/permissions\n```\n\nSets the GitHub Actions permissions policy for repositories and allowed actions and reusable workflows in an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n#### Body parameters\n\n* **`enabled_repositories`** (string) (required)\n  The policy that controls the repositories in the organization that are allowed to run GitHub Actions.\n  Can be one of: `all`, `none`, `selected`\n\n* **`allowed_actions`** (string)\n  The permissions policy that controls the actions and reusable workflows that are allowed to run.\n  Can be one of: `all`, `local_only`, `selected`\n\n* **`sha_pinning_required`** (boolean)\n  Whether actions must be pinned to a full-length commit SHA.\n\n### HTTP response status codes\n\n* **204** - No Content\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions \\\n  -d '{\n  \"enabled_repositories\": \"all\",\n  \"allowed_actions\": \"selected\",\n  \"sha_pinning_required\": true\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get artifact and log retention settings for an organization\n\n```\nGET /orgs/{org}/actions/permissions/artifact-and-log-retention\n```\n\nGets artifact and log retention settings for an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope or the \"Actions policies\" fine-grained permission to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/actions/permissions/artifact-and-log-retention\n```\n\n**Response schema (Status: 200):**\n\n* `days`: required, integer\n* `maximum_allowed_days`: required, integer\n\n## Set artifact and log retention settings for an organization\n\n```\nPUT /orgs/{org}/actions/permissions/artifact-and-log-retention\n```\n\nSets artifact and log retention settings for an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope or the \"Actions policies\" fine-grained permission to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n#### Body parameters\n\n* **`days`** (integer) (required)\n  The number of days to retain artifacts and logs\n\n### HTTP response status codes\n\n* **204** - No content\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n* **409** - Conflict\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/artifact-and-log-retention \\\n  -d '{\n  \"days\": 100\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get fork PR contributor approval permissions for an organization\n\n```\nGET /orgs/{org}/actions/permissions/fork-pr-contributor-approval\n```\n\nGets the fork PR contributor approval policy for an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope or the \"Actions policies\" fine-grained permission to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n* **404** - Resource not found\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/actions/permissions/fork-pr-contributor-approval\n```\n\n**Response schema (Status: 200):**\n\n* `approval_policy`: required, string, enum: `first_time_contributors_new_to_github`, `first_time_contributors`, `all_external_contributors`\n\n## Set fork PR contributor approval permissions for an organization\n\n```\nPUT /orgs/{org}/actions/permissions/fork-pr-contributor-approval\n```\n\nSets the fork PR contributor approval policy for an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n#### Body parameters\n\n* **`approval_policy`** (string) (required)\n  The policy that controls when fork PR workflows require approval from a maintainer.\n  Can be one of: `first_time_contributors_new_to_github`, `first_time_contributors`, `all_external_contributors`\n\n### HTTP response status codes\n\n* **204** - No Content\n\n* **404** - Resource not found\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Set approval policy to first time contributors\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/fork-pr-contributor-approval \\\n  -d '{\n  \"approval_policy\": \"first_time_contributors\"\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get private repo fork PR workflow settings for an organization\n\n```\nGET /orgs/{org}/actions/permissions/fork-pr-workflows-private-repos\n```\n\nGets the settings for whether workflows from fork pull requests can run on private repositories in an organization.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/actions/permissions/fork-pr-workflows-private-repos\n```\n\n**Response schema (Status: 200):**\n\n* `run_workflows_from_fork_pull_requests`: required, boolean\n* `send_write_tokens_to_workflows`: required, boolean\n* `send_secrets_and_variables`: required, boolean\n* `require_approval_for_fork_pr_workflows`: required, boolean\n\n## Set private repo fork PR workflow settings for an organization\n\n```\nPUT /orgs/{org}/actions/permissions/fork-pr-workflows-private-repos\n```\n\nSets the settings for whether workflows from fork pull requests can run on private repositories in an organization.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n#### Body parameters\n\n* **`run_workflows_from_fork_pull_requests`** (boolean) (required)\n  Whether workflows triggered by pull requests from forks are allowed to run on private repositories.\n\n* **`send_write_tokens_to_workflows`** (boolean)\n  Whether GitHub Actions can create pull requests or submit approving pull request reviews from a workflow triggered by a fork pull request.\n\n* **`send_secrets_and_variables`** (boolean)\n  Whether to make secrets and variables available to workflows triggered by pull requests from forks.\n\n* **`require_approval_for_fork_pr_workflows`** (boolean)\n  Whether workflows triggered by pull requests from forks require approval from a repository administrator to run.\n\n### HTTP response status codes\n\n* **204** - Empty response for successful settings update\n\n* **403** - Forbidden - Fork PR workflow settings for private repositories are managed by the enterprise owner\n\n* **404** - Resource not found\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/fork-pr-workflows-private-repos \\\n  -d '{\n  \"run_workflows_from_fork_pull_requests\": true,\n  \"send_write_tokens_to_workflows\": false,\n  \"send_secrets_and_variables\": false,\n  \"require_approval_for_fork_pr_workflows\": true\n}'\n```\n\n**Response schema (Status: 204):**\n\n## List selected repositories enabled for GitHub Actions in an organization\n\n```\nGET /orgs/{org}/actions/permissions/repositories\n```\n\nLists the selected repositories that are enabled for GitHub Actions in an organization. To use this endpoint, the organization permission policy for enabled\\_repositories must be configured to selected. For more information, see \"Set GitHub Actions permissions for an organization.\"\nOAuth app tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n* **`per_page`** (integer)\n  The number of results per page (max 100). For more information, see \"Using pagination in the REST API.\"\n  Default: `30`\n\n* **`page`** (integer)\n  The page number of the results to fetch. For more information, see \"Using pagination in the REST API.\"\n  Default: `1`\n\n### HTTP response status codes\n\n* **200** - OK\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/actions/permissions/repositories\n```\n\n**Response schema (Status: 200):**\n\n* `total_count`: required, number\n* `repositories`: required, array of `Repository`:\n  * `id`: required, integer, format: int64\n  * `node_id`: required, string\n  * `name`: required, string\n  * `full_name`: required, string\n  * `license`: required, any of:\n    * **null**\n    * **License Simple**\n      * `key`: required, string\n      * `name`: required, string\n      * `url`: required, string or null, format: uri\n      * `spdx_id`: required, string or null\n      * `node_id`: required, string\n      * `html_url`: string, format: uri\n  * `forks`: required, integer\n  * `permissions`: object:\n    * `admin`: required, boolean\n    * `pull`: required, boolean\n    * `triage`: boolean\n    * `push`: required, boolean\n    * `maintain`: boolean\n  * `owner`: required, `Simple User`:\n    * `name`: string or null\n    * `email`: string or null\n    * `login`: required, string\n    * `id`: required, integer, format: int64\n    * `node_id`: required, string\n    * `avatar_url`: required, string, format: uri\n    * `gravatar_id`: required, string or null\n    * `url`: required, string, format: uri\n    * `html_url`: required, string, format: uri\n    * `followers_url`: required, string, format: uri\n    * `following_url`: required, string\n    * `gists_url`: required, string\n    * `starred_url`: required, string\n    * `subscriptions_url`: required, string, format: uri\n    * `organizations_url`: required, string, format: uri\n    * `repos_url`: required, string, format: uri\n    * `events_url`: required, string\n    * `received_events_url`: required, string, format: uri\n    * `type`: required, string\n    * `site_admin`: required, boolean\n    * `starred_at`: string\n    * `user_view_type`: string\n  * `private`: required, boolean, default: `false`\n  * `html_url`: required, string, format: uri\n  * `description`: required, string or null\n  * `fork`: required, boolean\n  * `url`: required, string, format: uri\n  * `archive_url`: required, string\n  * `assignees_url`: required, string\n  * `blobs_url`: required, string\n  * `branches_url`: required, string\n  * `collaborators_url`: required, string\n  * `comments_url`: required, string\n  * `commits_url`: required, string\n  * `compare_url`: required, string\n  * `contents_url`: required, string\n  * `contributors_url`: required, string, format: uri\n  * `deployments_url`: required, string, format: uri\n  * `downloads_url`: required, string, format: uri\n  * `events_url`: required, string, format: uri\n  * `forks_url`: required, string, format: uri\n  * `git_commits_url`: required, string\n  * `git_refs_url`: required, string\n  * `git_tags_url`: required, string\n  * `git_url`: required, string\n  * `issue_comment_url`: required, string\n  * `issue_events_url`: required, string\n  * `issues_url`: required, string\n  * `keys_url`: required, string\n  * `labels_url`: required, string\n  * `languages_url`: required, string, format: uri\n  * `merges_url`: required, string, format: uri\n  * `milestones_url`: required, string\n  * `notifications_url`: required, string\n  * `pulls_url`: required, string\n  * `releases_url`: required, string\n  * `ssh_url`: required, string\n  * `stargazers_url`: required, string, format: uri\n  * `statuses_url`: required, string\n  * `subscribers_url`: required, string, format: uri\n  * `subscription_url`: required, string, format: uri\n  * `tags_url`: required, string, format: uri\n  * `teams_url`: required, string, format: uri\n  * `trees_url`: required, string\n  * `clone_url`: required, string\n  * `mirror_url`: required, string or null, format: uri\n  * `hooks_url`: required, string, format: uri\n  * `svn_url`: required, string, format: uri\n  * `homepage`: required, string or null, format: uri\n  * `language`: required, string or null\n  * `forks_count`: required, integer\n  * `stargazers_count`: required, integer\n  * `watchers_count`: required, integer\n  * `size`: required, integer\n  * `default_branch`: required, string\n  * `open_issues_count`: required, integer\n  * `is_template`: boolean, default: `false`\n  * `topics`: array of string\n  * `has_issues`: required, boolean, default: `true`\n  * `has_projects`: required, boolean, default: `true`\n  * `has_wiki`: required, boolean, default: `true`\n  * `has_pages`: required, boolean\n  * `has_discussions`: boolean, default: `false`\n  * `has_pull_requests`: boolean, default: `true`\n  * `pull_request_creation_policy`: string, enum: `all`, `collaborators_only`\n  * `archived`: required, boolean, default: `false`\n  * `disabled`: required, boolean\n  * `visibility`: string, default: `\"public\"`\n  * `pushed_at`: required, string or null, format: date-time\n  * `created_at`: required, string or null, format: date-time\n  * `updated_at`: required, string or null, format: date-time\n  * `allow_rebase_merge`: boolean, default: `true`\n  * `temp_clone_token`: string\n  * `allow_squash_merge`: boolean, default: `true`\n  * `allow_auto_merge`: boolean, default: `false`\n  * `delete_branch_on_merge`: boolean, default: `false`\n  * `allow_update_branch`: boolean, default: `false`\n  * `squash_merge_commit_title`: string, enum: `PR_TITLE`, `COMMIT_OR_PR_TITLE`\n  * `squash_merge_commit_message`: string, enum: `PR_BODY`, `COMMIT_MESSAGES`, `BLANK`\n  * `merge_commit_title`: string, enum: `PR_TITLE`, `MERGE_MESSAGE`\n  * `merge_commit_message`: string, enum: `PR_BODY`, `PR_TITLE`, `BLANK`\n  * `allow_merge_commit`: boolean, default: `true`\n  * `allow_forking`: boolean\n  * `web_commit_signoff_required`: boolean, default: `false`\n  * `open_issues`: required, integer\n  * `watchers`: required, integer\n  * `starred_at`: string\n  * `anonymous_access_enabled`: boolean\n  * `code_search_index_status`: object:\n    * `lexical_search_ok`: boolean\n    * `lexical_commit_sha`: string\n\n## Set selected repositories enabled for GitHub Actions in an organization\n\n```\nPUT /orgs/{org}/actions/permissions/repositories\n```\n\nReplaces the list of selected repositories that are enabled for GitHub Actions in an organization. To use this endpoint, the organization permission policy for enabled\\_repositories must be configured to selected. For more information, see \"Set GitHub Actions permissions for an organization.\"\nOAuth app tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n#### Body parameters\n\n* **`selected_repository_ids`** (array of integers) (required)\n  List of repository IDs to enable for GitHub Actions.\n\n### HTTP response status codes\n\n* **204** - No Content\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/repositories \\\n  -d '{\n  \"selected_repository_ids\": [\n    32,\n    42\n  ]\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Enable a selected repository for GitHub Actions in an organization\n\n```\nPUT /orgs/{org}/actions/permissions/repositories/{repository_id}\n```\n\nAdds a repository to the list of selected repositories that are enabled for GitHub Actions in an organization. To use this endpoint, the organization permission policy for enabled\\_repositories must be must be configured to selected. For more information, see \"Set GitHub Actions permissions for an organization.\"\nOAuth tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n* **`repository_id`** (integer) (required)\n  The unique identifier of the repository.\n\n### HTTP response status codes\n\n* **204** - No Content\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/repositories/REPOSITORY_ID\n```\n\n**Response schema (Status: 204):**\n\n## Disable a selected repository for GitHub Actions in an organization\n\n```\nDELETE /orgs/{org}/actions/permissions/repositories/{repository_id}\n```\n\nRemoves a repository from the list of selected repositories that are enabled for GitHub Actions in an organization. To use this endpoint, the organization permission policy for enabled\\_repositories must be configured to selected. For more information, see \"Set GitHub Actions permissions for an organization.\"\nOAuth tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n* **`repository_id`** (integer) (required)\n  The unique identifier of the repository.\n\n### HTTP response status codes\n\n* **204** - No Content\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X DELETE \\\n  https://api.github.com/orgs/ORG/actions/permissions/repositories/REPOSITORY_ID\n```\n\n**Response schema (Status: 204):**\n\n## Get allowed actions and reusable workflows for an organization\n\n```\nGET /orgs/{org}/actions/permissions/selected-actions\n```\n\nGets the selected actions and reusable workflows that are allowed in an organization. To use this endpoint, the organization permission policy for allowed\\_actions must be configured to selected. For more information, see \"Set GitHub Actions permissions for an organization.\"\nOAuth tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/actions/permissions/selected-actions\n```\n\n**Response schema (Status: 200):**\n\n* `github_owned_allowed`: boolean\n* `verified_allowed`: boolean\n* `patterns_allowed`: array of string\n\n## Set allowed actions and reusable workflows for an organization\n\n```\nPUT /orgs/{org}/actions/permissions/selected-actions\n```\n\nSets the actions and reusable workflows that are allowed in an organization. To use this endpoint, the organization permission policy for allowed\\_actions must be configured to selected. For more information, see \"Set GitHub Actions permissions for an organization.\"\nOAuth app tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n#### Body parameters\n\n* **`github_owned_allowed`** (boolean)\n  Whether GitHub-owned actions are allowed. For example, this includes the actions in the actions organization.\n\n* **`verified_allowed`** (boolean)\n  Whether actions from GitHub Marketplace verified creators are allowed. Set to true to allow all actions by GitHub Marketplace verified creators.\n\n* **`patterns_allowed`** (array of strings)\n  Specifies a list of string-matching patterns to allow specific action(s) and reusable workflow(s). Wildcards, tags, and SHAs are allowed. For example, monalisa/octocat@*, monalisa/octocat\\@v2, monalisa/*.\n  Note\n\nThe patterns\\_allowed setting only applies to public repositories.\n\n### HTTP response status codes\n\n* **204** - No Content\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/selected-actions \\\n  -d '{\n  \"github_owned_allowed\": true,\n  \"verified_allowed\": false,\n  \"patterns_allowed\": [\n    \"monalisa/octocat@*\",\n    \"docker/*\"\n  ]\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get self-hosted runners settings for an organization\n\n```\nGET /orgs/{org}/actions/permissions/self-hosted-runners\n```\n\nGets the settings for self-hosted runners for an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope or the \"Actions policies\" fine-grained permission to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/actions/permissions/self-hosted-runners\n```\n\n**Response schema (Status: 200):**\n\n* `enabled_repositories`: required, string, enum: `all`, `selected`, `none`\n* `selected_repositories_url`: string\n\n## Set self-hosted runners settings for an organization\n\n```\nPUT /orgs/{org}/actions/permissions/self-hosted-runners\n```\n\nSets the settings for self-hosted runners for an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope or the \"Actions policies\" fine-grained permission to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n#### Body parameters\n\n* **`enabled_repositories`** (string) (required)\n  The policy that controls whether self-hosted runners can be used in the organization\n  Can be one of: `all`, `selected`, `none`\n\n### HTTP response status codes\n\n* **204** - No content\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n* **409** - Conflict\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/self-hosted-runners \\\n  -d '{\n  \"enabled_repositories\": \"all\"\n}'\n```\n\n**Response schema (Status: 204):**\n\n## List repositories allowed to use self-hosted runners in an organization\n\n```\nGET /orgs/{org}/actions/permissions/self-hosted-runners/repositories\n```\n\nLists repositories that are allowed to use self-hosted runners in an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope or the \"Actions policies\" fine-grained permission to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n* **`per_page`** (integer)\n  The number of results per page (max 100). For more information, see \"Using pagination in the REST API.\"\n  Default: `30`\n\n* **`page`** (integer)\n  The page number of the results to fetch. For more information, see \"Using pagination in the REST API.\"\n  Default: `1`\n\n### HTTP response status codes\n\n* **200** - OK\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/actions/permissions/self-hosted-runners/repositories\n```\n\n**Response schema (Status: 200):**\n\n* `total_count`: integer\n* `repositories`: array of `Repository`:\n  * `id`: required, integer, format: int64\n  * `node_id`: required, string\n  * `name`: required, string\n  * `full_name`: required, string\n  * `license`: required, any of:\n    * **null**\n    * **License Simple**\n      * `key`: required, string\n      * `name`: required, string\n      * `url`: required, string or null, format: uri\n      * `spdx_id`: required, string or null\n      * `node_id`: required, string\n      * `html_url`: string, format: uri\n  * `forks`: required, integer\n  * `permissions`: object:\n    * `admin`: required, boolean\n    * `pull`: required, boolean\n    * `triage`: boolean\n    * `push`: required, boolean\n    * `maintain`: boolean\n  * `owner`: required, `Simple User`:\n    * `name`: string or null\n    * `email`: string or null\n    * `login`: required, string\n    * `id`: required, integer, format: int64\n    * `node_id`: required, string\n    * `avatar_url`: required, string, format: uri\n    * `gravatar_id`: required, string or null\n    * `url`: required, string, format: uri\n    * `html_url`: required, string, format: uri\n    * `followers_url`: required, string, format: uri\n    * `following_url`: required, string\n    * `gists_url`: required, string\n    * `starred_url`: required, string\n    * `subscriptions_url`: required, string, format: uri\n    * `organizations_url`: required, string, format: uri\n    * `repos_url`: required, string, format: uri\n    * `events_url`: required, string\n    * `received_events_url`: required, string, format: uri\n    * `type`: required, string\n    * `site_admin`: required, boolean\n    * `starred_at`: string\n    * `user_view_type`: string\n  * `private`: required, boolean, default: `false`\n  * `html_url`: required, string, format: uri\n  * `description`: required, string or null\n  * `fork`: required, boolean\n  * `url`: required, string, format: uri\n  * `archive_url`: required, string\n  * `assignees_url`: required, string\n  * `blobs_url`: required, string\n  * `branches_url`: required, string\n  * `collaborators_url`: required, string\n  * `comments_url`: required, string\n  * `commits_url`: required, string\n  * `compare_url`: required, string\n  * `contents_url`: required, string\n  * `contributors_url`: required, string, format: uri\n  * `deployments_url`: required, string, format: uri\n  * `downloads_url`: required, string, format: uri\n  * `events_url`: required, string, format: uri\n  * `forks_url`: required, string, format: uri\n  * `git_commits_url`: required, string\n  * `git_refs_url`: required, string\n  * `git_tags_url`: required, string\n  * `git_url`: required, string\n  * `issue_comment_url`: required, string\n  * `issue_events_url`: required, string\n  * `issues_url`: required, string\n  * `keys_url`: required, string\n  * `labels_url`: required, string\n  * `languages_url`: required, string, format: uri\n  * `merges_url`: required, string, format: uri\n  * `milestones_url`: required, string\n  * `notifications_url`: required, string\n  * `pulls_url`: required, string\n  * `releases_url`: required, string\n  * `ssh_url`: required, string\n  * `stargazers_url`: required, string, format: uri\n  * `statuses_url`: required, string\n  * `subscribers_url`: required, string, format: uri\n  * `subscription_url`: required, string, format: uri\n  * `tags_url`: required, string, format: uri\n  * `teams_url`: required, string, format: uri\n  * `trees_url`: required, string\n  * `clone_url`: required, string\n  * `mirror_url`: required, string or null, format: uri\n  * `hooks_url`: required, string, format: uri\n  * `svn_url`: required, string, format: uri\n  * `homepage`: required, string or null, format: uri\n  * `language`: required, string or null\n  * `forks_count`: required, integer\n  * `stargazers_count`: required, integer\n  * `watchers_count`: required, integer\n  * `size`: required, integer\n  * `default_branch`: required, string\n  * `open_issues_count`: required, integer\n  * `is_template`: boolean, default: `false`\n  * `topics`: array of string\n  * `has_issues`: required, boolean, default: `true`\n  * `has_projects`: required, boolean, default: `true`\n  * `has_wiki`: required, boolean, default: `true`\n  * `has_pages`: required, boolean\n  * `has_discussions`: boolean, default: `false`\n  * `has_pull_requests`: boolean, default: `true`\n  * `pull_request_creation_policy`: string, enum: `all`, `collaborators_only`\n  * `archived`: required, boolean, default: `false`\n  * `disabled`: required, boolean\n  * `visibility`: string, default: `\"public\"`\n  * `pushed_at`: required, string or null, format: date-time\n  * `created_at`: required, string or null, format: date-time\n  * `updated_at`: required, string or null, format: date-time\n  * `allow_rebase_merge`: boolean, default: `true`\n  * `temp_clone_token`: string\n  * `allow_squash_merge`: boolean, default: `true`\n  * `allow_auto_merge`: boolean, default: `false`\n  * `delete_branch_on_merge`: boolean, default: `false`\n  * `allow_update_branch`: boolean, default: `false`\n  * `squash_merge_commit_title`: string, enum: `PR_TITLE`, `COMMIT_OR_PR_TITLE`\n  * `squash_merge_commit_message`: string, enum: `PR_BODY`, `COMMIT_MESSAGES`, `BLANK`\n  * `merge_commit_title`: string, enum: `PR_TITLE`, `MERGE_MESSAGE`\n  * `merge_commit_message`: string, enum: `PR_BODY`, `PR_TITLE`, `BLANK`\n  * `allow_merge_commit`: boolean, default: `true`\n  * `allow_forking`: boolean\n  * `web_commit_signoff_required`: boolean, default: `false`\n  * `open_issues`: required, integer\n  * `watchers`: required, integer\n  * `starred_at`: string\n  * `anonymous_access_enabled`: boolean\n  * `code_search_index_status`: object:\n    * `lexical_search_ok`: boolean\n    * `lexical_commit_sha`: string\n\n## Set repositories allowed to use self-hosted runners in an organization\n\n```\nPUT /orgs/{org}/actions/permissions/self-hosted-runners/repositories\n```\n\nSets repositories that are allowed to use self-hosted runners in an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope or the \"Actions policies\" fine-grained permission to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n#### Body parameters\n\n* **`selected_repository_ids`** (array of integers) (required)\n  IDs of repositories that can use repository-level self-hosted runners\n\n### HTTP response status codes\n\n* **204** - No content\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/self-hosted-runners/repositories \\\n  -d '{\n  \"selected_repository_ids\": [\n    1,\n    2,\n    3\n  ]\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Add a repository to the list of repositories allowed to use self-hosted runners in an organization\n\n```\nPUT /orgs/{org}/actions/permissions/self-hosted-runners/repositories/{repository_id}\n```\n\nAdds a repository to the list of repositories that are allowed to use self-hosted runners in an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope or the \"Actions policies\" fine-grained permission to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n* **`repository_id`** (integer) (required)\n  The unique identifier of the repository.\n\n### HTTP response status codes\n\n* **204** - No content\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n* **409** - Conflict\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/self-hosted-runners/repositories/REPOSITORY_ID\n```\n\n**Response schema (Status: 204):**\n\n## Remove a repository from the list of repositories allowed to use self-hosted runners in an organization\n\n```\nDELETE /orgs/{org}/actions/permissions/self-hosted-runners/repositories/{repository_id}\n```\n\nRemoves a repository from the list of repositories that are allowed to use self-hosted runners in an organization.\nOAuth app tokens and personal access tokens (classic) need the admin:org scope or the \"Actions policies\" fine-grained permission to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n* **`repository_id`** (integer) (required)\n  The unique identifier of the repository.\n\n### HTTP response status codes\n\n* **204** - No content\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n* **409** - Conflict\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X DELETE \\\n  https://api.github.com/orgs/ORG/actions/permissions/self-hosted-runners/repositories/REPOSITORY_ID\n```\n\n**Response schema (Status: 204):**\n\n## Get default workflow permissions for an organization\n\n```\nGET /orgs/{org}/actions/permissions/workflow\n```\n\nGets the default workflow permissions granted to the GITHUB\\_TOKEN when running workflows in an organization,\nas well as whether GitHub Actions can submit approving pull request reviews. For more information, see\n\"Setting the permissions of the GITHUB\\_TOKEN for your organization.\"\nOAuth tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/orgs/ORG/actions/permissions/workflow\n```\n\n**Response schema (Status: 200):**\n\n* `default_workflow_permissions`: required, string, enum: `read`, `write`\n* `can_approve_pull_request_reviews`: required, boolean\n\n## Set default workflow permissions for an organization\n\n```\nPUT /orgs/{org}/actions/permissions/workflow\n```\n\nSets the default workflow permissions granted to the GITHUB\\_TOKEN when running workflows in an organization, and sets if GitHub Actions\ncan submit approving pull request reviews. For more information, see\n\"Setting the permissions of the GITHUB\\_TOKEN for your organization.\"\nOAuth app tokens and personal access tokens (classic) need the admin:org scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`org`** (string) (required)\n  The organization name. The name is not case sensitive.\n\n#### Body parameters\n\n* **`default_workflow_permissions`** (string)\n  The default workflow permissions granted to the GITHUB\\_TOKEN when running workflows.\n  Can be one of: `read`, `write`\n\n* **`can_approve_pull_request_reviews`** (boolean)\n  Whether GitHub Actions can approve pull requests. Enabling this can be a security risk.\n\n### HTTP response status codes\n\n* **204** - Success response\n\n### Code examples\n\n#### Give read-only permission, and allow approving PRs.\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/orgs/ORG/actions/permissions/workflow \\\n  -d '{\n  \"default_workflow_permissions\": \"read\",\n  \"can_approve_pull_request_reviews\": true\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get GitHub Actions permissions for a repository\n\n```\nGET /repos/{owner}/{repo}/actions/permissions\n```\n\nGets the GitHub Actions permissions policy for a repository, including whether GitHub Actions is enabled and the actions and reusable workflows allowed to run in the repository.\nOAuth tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions\n```\n\n**Response schema (Status: 200):**\n\n* `enabled`: required, boolean\n* `allowed_actions`: string, enum: `all`, `local_only`, `selected`\n* `selected_actions_url`: string\n* `sha_pinning_required`: boolean\n\n## Set GitHub Actions permissions for a repository\n\n```\nPUT /repos/{owner}/{repo}/actions/permissions\n```\n\nSets the GitHub Actions permissions policy for enabling GitHub Actions and allowed actions and reusable workflows in the repository.\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n#### Body parameters\n\n* **`enabled`** (boolean) (required)\n  Whether GitHub Actions is enabled on the repository.\n\n* **`allowed_actions`** (string)\n  The permissions policy that controls the actions and reusable workflows that are allowed to run.\n  Can be one of: `all`, `local_only`, `selected`\n\n* **`sha_pinning_required`** (boolean)\n  Whether actions must be pinned to a full-length commit SHA.\n\n### HTTP response status codes\n\n* **204** - No Content\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions \\\n  -d '{\n  \"enabled\": true,\n  \"allowed_actions\": \"selected\",\n  \"sha_pinning_required\": true\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get the level of access for workflows outside of the repository\n\n```\nGET /repos/{owner}/{repo}/actions/permissions/access\n```\n\nGets the level of access that workflows outside of the repository have to actions and reusable workflows in the repository.\nThis endpoint only applies to private repositories.\nFor more information, see \"Allowing access to components in a private repository.\"\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/access\n```\n\n**Response schema (Status: 200):**\n\n* `access_level`: required, string, enum: `none`, `user`, `organization`\n\n## Set the level of access for workflows outside of the repository\n\n```\nPUT /repos/{owner}/{repo}/actions/permissions/access\n```\n\nSets the level of access that workflows outside of the repository have to actions and reusable workflows in the repository.\nThis endpoint only applies to private repositories.\nFor more information, see \"Allowing access to components in a private repository\".\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n#### Body parameters\n\n* **`access_level`** (string) (required)\n  Defines the level of access that workflows outside of the repository have to actions and reusable workflows within the\n  repository.\n  none means the access is only possible from workflows in this repository. user level access allows sharing across user owned private repositories only. organization level access allows sharing across the organization.\n  Can be one of: `none`, `user`, `organization`\n\n### HTTP response status codes\n\n* **204** - No Content\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/access \\\n  -d '{\n  \"access_level\": \"organization\"\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get artifact and log retention settings for a repository\n\n```\nGET /repos/{owner}/{repo}/actions/permissions/artifact-and-log-retention\n```\n\nGets artifact and log retention settings for a repository.\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n* **404** - Resource not found\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/artifact-and-log-retention\n```\n\n**Response schema (Status: 200):**\n\nSame response schema as [Get artifact and log retention settings for an organization](#get-artifact-and-log-retention-settings-for-an-organization).\n\n## Set artifact and log retention settings for a repository\n\n```\nPUT /repos/{owner}/{repo}/actions/permissions/artifact-and-log-retention\n```\n\nSets artifact and log retention settings for a repository.\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n#### Body parameters\n\n* **`days`** (integer) (required)\n  The number of days to retain artifacts and logs\n\n### HTTP response status codes\n\n* **204** - Empty response for successful settings update\n\n* **404** - Resource not found\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Set retention days\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/artifact-and-log-retention \\\n  -d '{\n  \"days\": 90\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get fork PR contributor approval permissions for a repository\n\n```\nGET /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval\n```\n\nGets the fork PR contributor approval policy for a repository.\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n* **404** - Resource not found\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/fork-pr-contributor-approval\n```\n\n**Response schema (Status: 200):**\n\nSame response schema as [Get fork PR contributor approval permissions for an organization](#get-fork-pr-contributor-approval-permissions-for-an-organization).\n\n## Set fork PR contributor approval permissions for a repository\n\n```\nPUT /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval\n```\n\nSets the fork PR contributor approval policy for a repository.\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n#### Body parameters\n\n* **`approval_policy`** (string) (required)\n  The policy that controls when fork PR workflows require approval from a maintainer.\n  Can be one of: `first_time_contributors_new_to_github`, `first_time_contributors`, `all_external_contributors`\n\n### HTTP response status codes\n\n* **204** - No Content\n\n* **404** - Resource not found\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Set approval policy to first time contributors\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/fork-pr-contributor-approval \\\n  -d '{\n  \"approval_policy\": \"first_time_contributors\"\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get private repo fork PR workflow settings for a repository\n\n```\nGET /repos/{owner}/{repo}/actions/permissions/fork-pr-workflows-private-repos\n```\n\nGets the settings for whether workflows from fork pull requests can run on a private repository.\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n* **403** - Forbidden\n\n* **404** - Resource not found\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/fork-pr-workflows-private-repos\n```\n\n**Response schema (Status: 200):**\n\nSame response schema as [Get private repo fork PR workflow settings for an organization](#get-private-repo-fork-pr-workflow-settings-for-an-organization).\n\n## Set private repo fork PR workflow settings for a repository\n\n```\nPUT /repos/{owner}/{repo}/actions/permissions/fork-pr-workflows-private-repos\n```\n\nSets the settings for whether workflows from fork pull requests can run on a private repository.\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n#### Body parameters\n\n* **`run_workflows_from_fork_pull_requests`** (boolean) (required)\n  Whether workflows triggered by pull requests from forks are allowed to run on private repositories.\n\n* **`send_write_tokens_to_workflows`** (boolean)\n  Whether GitHub Actions can create pull requests or submit approving pull request reviews from a workflow triggered by a fork pull request.\n\n* **`send_secrets_and_variables`** (boolean)\n  Whether to make secrets and variables available to workflows triggered by pull requests from forks.\n\n* **`require_approval_for_fork_pr_workflows`** (boolean)\n  Whether workflows triggered by pull requests from forks require approval from a repository administrator to run.\n\n### HTTP response status codes\n\n* **204** - Empty response for successful settings update\n\n* **404** - Resource not found\n\n* **422** - Validation failed, or the endpoint has been spammed.\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/fork-pr-workflows-private-repos \\\n  -d '{\n  \"run_workflows_from_fork_pull_requests\": true,\n  \"send_write_tokens_to_workflows\": false,\n  \"send_secrets_and_variables\": false,\n  \"require_approval_for_fork_pr_workflows\": true\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get allowed actions and reusable workflows for a repository\n\n```\nGET /repos/{owner}/{repo}/actions/permissions/selected-actions\n```\n\nGets the settings for selected actions and reusable workflows that are allowed in a repository. To use this endpoint, the repository policy for allowed\\_actions must be configured to selected. For more information, see \"Set GitHub Actions permissions for a repository.\"\nOAuth tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/selected-actions\n```\n\n**Response schema (Status: 200):**\n\nSame response schema as [Get allowed actions and reusable workflows for an organization](#get-allowed-actions-and-reusable-workflows-for-an-organization).\n\n## Set allowed actions and reusable workflows for a repository\n\n```\nPUT /repos/{owner}/{repo}/actions/permissions/selected-actions\n```\n\nSets the actions and reusable workflows that are allowed in a repository. To use this endpoint, the repository permission policy for allowed\\_actions must be configured to selected. For more information, see \"Set GitHub Actions permissions for a repository.\"\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n#### Body parameters\n\n* **`github_owned_allowed`** (boolean)\n  Whether GitHub-owned actions are allowed. For example, this includes the actions in the actions organization.\n\n* **`verified_allowed`** (boolean)\n  Whether actions from GitHub Marketplace verified creators are allowed. Set to true to allow all actions by GitHub Marketplace verified creators.\n\n* **`patterns_allowed`** (array of strings)\n  Specifies a list of string-matching patterns to allow specific action(s) and reusable workflow(s). Wildcards, tags, and SHAs are allowed. For example, monalisa/octocat@*, monalisa/octocat\\@v2, monalisa/*.\n  Note\n\nThe patterns\\_allowed setting only applies to public repositories.\n\n### HTTP response status codes\n\n* **204** - No Content\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/selected-actions \\\n  -d '{\n  \"github_owned_allowed\": true,\n  \"verified_allowed\": false,\n  \"patterns_allowed\": [\n    \"monalisa/octocat@*\",\n    \"docker/*\"\n  ]\n}'\n```\n\n**Response schema (Status: 204):**\n\n## Get default workflow permissions for a repository\n\n```\nGET /repos/{owner}/{repo}/actions/permissions/workflow\n```\n\nGets the default workflow permissions granted to the GITHUB\\_TOKEN when running workflows in a repository,\nas well as if GitHub Actions can submit approving pull request reviews.\nFor more information, see \"Setting the permissions of the GITHUB\\_TOKEN for your repository.\"\nOAuth tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n### HTTP response status codes\n\n* **200** - OK\n\n### Code examples\n\n#### Example\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X GET \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/workflow\n```\n\n**Response schema (Status: 200):**\n\nSame response schema as [Get default workflow permissions for an organization](#get-default-workflow-permissions-for-an-organization).\n\n## Set default workflow permissions for a repository\n\n```\nPUT /repos/{owner}/{repo}/actions/permissions/workflow\n```\n\nSets the default workflow permissions granted to the GITHUB\\_TOKEN when running workflows in a repository, and sets if GitHub Actions\ncan submit approving pull request reviews.\nFor more information, see \"Setting the permissions of the GITHUB\\_TOKEN for your repository.\"\nOAuth app tokens and personal access tokens (classic) need the repo scope to use this endpoint.\n\n### Parameters\n\n#### Headers\n\n* **`accept`** (string)\n  Setting to `application/vnd.github+json` is recommended.\n\n#### Path and query parameters\n\n* **`owner`** (string) (required)\n  The account owner of the repository. The name is not case sensitive.\n\n* **`repo`** (string) (required)\n  The name of the repository without the .git extension. The name is not case sensitive.\n\n#### Body parameters\n\n* **`default_workflow_permissions`** (string)\n  The default workflow permissions granted to the GITHUB\\_TOKEN when running workflows.\n  Can be one of: `read`, `write`\n\n* **`can_approve_pull_request_reviews`** (boolean)\n  Whether GitHub Actions can approve pull requests. Enabling this can be a security risk.\n\n### HTTP response status codes\n\n* **204** - Success response\n\n* **409** - Conflict response when changing a setting is prevented by the owning organization\n\n### Code examples\n\n#### Give read-only permission, and allow approving PRs.\n\n**Request:**\n\n```curl\ncurl -L \\\n  -X PUT \\\n  https://api.github.com/repos/OWNER/REPO/actions/permissions/workflow \\\n  -d '{\n  \"default_workflow_permissions\": \"read\",\n  \"can_approve_pull_request_reviews\": true\n}'\n```\n\n**Response schema (Status: 204):**"}