Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -197,6 +197,9 @@ Repository permissions work for both user and organization resource owners.
|---|---|---|
| `actions` | Actions | `read`, `write` |
| `administration` | Administration | `read`, `write` |
| {% ifversion artifact-metadata %} |
| `artifact_metadata` | Artifact Metadata | `read`, `write` |
| {% endif %} |
| `attestations` | Attestations | `read`, `write` |
| `security_events` | Code scanning alerts | `read`, `write` |
| `codespaces` | Codespaces | `read`, `write` |
Expand Down
4 changes: 4 additions & 0 deletions data/features/artifact-metadata.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
# Artifact Metadata GA
versions:
fpt: '*'
ghec: '*'
3 changes: 2 additions & 1 deletion data/reusables/actions/github-token-available-permissions.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,8 @@ You can define the access that the `GITHUB_TOKEN` will permit by specifying `rea

```yaml
permissions:
actions: read|write|none{% ifversion artifact-attestations %}
actions: read|write|none{% ifversion artifact-metadata %}
artifact-metadata: read|write|none{% endif %}{% ifversion artifact-attestations %}
attestations: read|write|none{% endif %}
checks: read|write|none
contents: read|write|none
Expand Down
3 changes: 3 additions & 0 deletions data/reusables/actions/github-token-scope-descriptions.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,9 @@ Available permissions and details of what each allows an action to do:
| Permission | Allows an action using `GITHUB_TOKEN` to |
| --- | --- |
| `actions` | Work with GitHub Actions. For example, `actions: write` permits an action to cancel a workflow run. For more information, see [AUTOTITLE](/rest/overview/permissions-required-for-github-apps?apiVersion=2022-11-28#repository-permissions-for-actions). |
| {% ifversion artifact-metadata %} |
| `artifact-metadata` | Work with artifact metadata. For example, `artifact-metadata: write` permits an action to create storage records on behalf of a build artifact. For more information, see [AUTOTITLE](/rest/orgs/artifact-metadata?apiVersion=2022-11-28). |
| {% endif %} |
| {% ifversion artifact-attestations %} |
| `attestations` | Work with artifact attestations. For example, `attestations: write` permits an action to generate an artifact attestation for a build. For more information, see [AUTOTITLE](/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds) |
| {% endif %} |
Expand Down