Open Context Protocol is live! 🚀 Read the launch post
actionsSetAllowedActionsRepository

actionsSetAllowedActionsRepository

Set allowed actions and reusable workflows for a repository

PUT /repos/{owner}/{repo}/actions/permissions/selected-actions HTTP/1.1

Parameters

{
  "owner": {
    "description": "The account owner of the repository. The name is not case sensitive.",
    "required": true,
    "location": "path",
    "type": "string"
  },
  "repo": {
    "description": "The name of the repository without the `.git` extension. The name is not case sensitive.",
    "required": true,
    "location": "path",
    "type": "string"
  },
  "github_owned_allowed": {
    "description": "Whether GitHub-owned actions are allowed. For example, this includes the actions in the `actions` organization.",
    "required": false,
    "location": "body",
    "type": "boolean"
  },
  "verified_allowed": {
    "description": "Whether actions from GitHub Marketplace verified creators are allowed. Set to `true` to allow all actions by GitHub Marketplace verified creators.",
    "required": false,
    "location": "body",
    "type": "boolean"
  },
  "patterns_allowed": {
    "description": "Specifies a list of string-matching patterns to allow specific action(s) and reusable workflow(s). Wildcards, tags, and SHAs are allowed. For example, `monalisa/octocat@*`, `monalisa/octocat@v2`, `monalisa/*`.\n\n> [!NOTE]\n> The `patterns_allowed` setting only applies to public repositories.",
    "required": false,
    "location": "body",
    "type": "array"
  }
}