Acerca de los permisos necesarios para los fine-grained personal access token
Cuando se crea un fine-grained personal access token, se le concede un conjunto de permisos. Los permisos definen a qué recursos puede acceder la GitHub App a través de la API. Para más información, consulta Administración de tokens de acceso personal.
Para ayudarle a elegir los permisos correctos, recibirá el encabezado X-Accepted-GitHub-Permissions en la respuesta de la API de REST. El encabezado le indicará qué permisos son necesarios para acceder al punto de conexión. Para más información, consulta Solución de problemas de API de REST.
Estos permisos son necesarios para acceder a los recursos privados. Algunos puntos de conexión también se pueden usar para acceder a los recursos públicos sin estos permisos. Para ver si un punto de conexión puede acceder a recursos públicos sin un permiso, consulte la documentación de ese punto de conexión.
Algunos puntos de conexión requieren más de un permiso. Otros puntos de conexión funcionan con cualquier permiso de un conjunto de permisos. En estos casos, la columna "Permisos adicionales" incluirá una marca de verificación. Para más información sobre los permisos necesarios para usar el punto de conexión, consulte la documentación de ese punto de conexión.
Organization permissions for "Administration"
Organization permissions for "Custom organization roles"
Organization permissions for "Custom properties"
Organization permissions for "Custom repository roles"
Organization permissions for "Events"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| GET /users/{username}/events/orgs/{org} | read |
Organization permissions for "Members"
Organization permissions for "Organization announcement banners"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| PATCH /orgs/{org}/announcement | write | |
| DELETE /orgs/{org}/announcement | write | |
| GET /orgs/{org}/announcement | read |
Organization permissions for "Organization bypass requests for secret scanning"
Organization permissions for "Organization dependabot secrets"
Organization permissions for "Organization dismissal requests for Dependabot"
Organization permissions for "Organization dismissal requests for code scanning"
Organization permissions for "Organization pre-receive hooks"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| PATCH /orgs/{org}/pre-receive-hooks/{pre_receive_hook_id} | write | |
| DELETE /orgs/{org}/pre-receive-hooks/{pre_receive_hook_id} | write | |
| GET /orgs/{org}/pre-receive-hooks | read | |
| GET /orgs/{org}/pre-receive-hooks/{pre_receive_hook_id} | read |
Organization permissions for "Organization private registries"
Organization permissions for "Secret scanning alert dismissal requests"
Organization permissions for "Secrets"
Organization permissions for "Self-hosted runners"
Organization permissions for "Variables"
Organization permissions for "Webhooks"
Repository permissions for "Actions"
Repository permissions for "Administration"
Repository permissions for "Code scanning alerts"
Repository permissions for "Commit statuses"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| POST /repos/{owner}/{repo}/statuses/{sha} | write | |
| GET /repos/{owner}/{repo}/commits/{ref}/status | read | |
| GET /repos/{owner}/{repo}/commits/{ref}/statuses | read |
Repository permissions for "Contents"
Repository permissions for "Custom properties"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| PATCH /repos/{owner}/{repo}/properties/values | write |
Repository permissions for "Dependabot alerts"
Repository permissions for "Dependabot secrets"
Repository permissions for "Deployments"
Repository permissions for "Environments"
Repository permissions for "Issues"
Repository permissions for "Metadata"
Repository permissions for "Pages"
Repository permissions for "Pull requests"
Repository permissions for "Repository pre-receive hooks"
Repository permissions for "Secret scanning alert dismissal requests"
Repository permissions for "Secret scanning alerts"
Repository permissions for "Secret scanning push protection bypass requests"
Repository permissions for "Secrets"
Repository permissions for "Variables"
Repository permissions for "Webhooks"
Repository permissions for "Workflows"
User permissions for "Email addresses"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| POST /user/emails | write | |
| DELETE /user/emails | write | |
| GET /user/emails | read | |
| GET /user/public_emails | read |
User permissions for "Followers"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| PUT /user/following/{username} | write | |
| DELETE /user/following/{username} | write | |
| GET /user/followers | read | |
| GET /user/following | read | |
| GET /user/following/{username} | read |
User permissions for "GPG keys"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| POST /user/gpg_keys | write | |
| DELETE /user/gpg_keys/{gpg_key_id} | write | |
| GET /user/gpg_keys | read | |
| GET /user/gpg_keys/{gpg_key_id} | read |
User permissions for "Gists"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| POST /gists | write | |
| PATCH /gists/{gist_id} | write | |
| DELETE /gists/{gist_id} | write | |
| POST /gists/{gist_id}/comments | write | |
| PATCH /gists/{gist_id}/comments/{comment_id} | write | |
| DELETE /gists/{gist_id}/comments/{comment_id} | write | |
| POST /gists/{gist_id}/forks | write | |
| PUT /gists/{gist_id}/star | write | |
| DELETE /gists/{gist_id}/star | write |
User permissions for "Git SSH keys"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| POST /user/keys | write | |
| DELETE /user/keys/{key_id} | write | |
| GET /user/keys | read | |
| GET /user/keys/{key_id} | read | |
| GET /users/{username}/keys | read |
User permissions for "Private repository invitations"
User permissions for "Profile"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| PATCH /user | write | |
| POST /user/social_accounts | write | |
| DELETE /user/social_accounts | write |
User permissions for "SSH signing keys"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| POST /user/ssh_signing_keys | write | |
| DELETE /user/ssh_signing_keys/{ssh_signing_key_id} | write | |
| GET /user/ssh_signing_keys | read | |
| GET /user/ssh_signing_keys/{ssh_signing_key_id} | read |
User permissions for "Starring"
User permissions for "Watching"
| punto final | Acceso | Permisos adicionales |
|---|---|---|
| GET /user/subscriptions | read | |
| GET /users/{username}/subscriptions | read |