Skip to content

Instantly share code, notes, and snippets.

@nfx
Created October 14, 2026 17:49
Show Gist options
  • Select an option

  • Save nfx/6ff7fe1791cbbd497bb4ef57e8a48f60 to your computer and use it in GitHub Desktop.

Select an option

Save nfx/6ff7fe1791cbbd497bb4ef57e8a48f60 to your computer and use it in GitHub Desktop.
GitHub Terraform Permissions
kind resource level for access
r github_actions_environment_secret organization members read
r github_actions_environment_secret repository environments write
r github_actions_environment_secret repository metadata read
r github_actions_environment_variable organization members read
r github_actions_environment_variable repository environments write
r github_actions_environment_variable repository metadata read
r github_actions_organization_oidc_subject_claim_customization_template organization administration write
r github_actions_organization_permissions organization administration write
r github_actions_organization_secret organization members read
r github_actions_organization_secret organization secrets write
r github_actions_organization_secret_repositories organization secrets write
r github_actions_organization_secret_repository organization secrets write
r github_actions_organization_variable organization members read
r github_actions_organization_variable organization variables write
r github_actions_organization_variable_repositories organization variables write
r github_actions_organization_variable_repository organization variables write
r github_actions_repository_access_level repository administration write
r github_actions_repository_oidc_subject_claim_customization_template repository actions write
r github_actions_repository_permissions repository administration write
r github_actions_runner_group organization self-hosted-runners write
r github_actions_secret organization members read
r github_actions_secret repository metadata read
r github_actions_secret repository secrets write
r github_actions_variable organization members read
r github_actions_variable repository metadata read
r github_actions_variable repository variables write
r github_app_installation_repositories repository github-app-installation-repository-access write
r github_app_installation_repositories repository metadata read
r github_app_installation_repository repository github-app-installation-repository-access write
r github_app_installation_repository repository metadata read
r github_branch repository contents write
r github_branch repository workflows write
r github_branch_default organization members read
r github_branch_default repository administration write
r github_branch_default repository contents write
r github_branch_default repository metadata read
r github_branch_protection_v3 organization members read
r github_branch_protection_v3 repository administration write
r github_codespaces_organization_secret organization organization-codespaces-secrets write
r github_codespaces_organization_secret_repositories organization organization-codespaces-secrets write
r github_codespaces_secret repository codespaces-secrets write
r github_codespaces_user_secret user codespaces-user-secrets write
r github_dependabot_organization_secret organization members read
r github_dependabot_organization_secret organization organization-dependabot-secrets write
r github_dependabot_organization_secret_repositories organization organization-dependabot-secrets write
r github_dependabot_organization_secret_repository organization organization-dependabot-secrets write
r github_dependabot_secret organization members read
r github_dependabot_secret repository dependabot-secrets write
r github_dependabot_secret repository metadata read
r github_emu_group_mapping organization members read
r github_issue repository issues write
r github_issue repository pull-requests write
r github_issue_label repository issues write
r github_issue_label repository pull-requests write
r github_issue_labels repository issues write
r github_issue_labels repository pull-requests write
r github_membership organization members write
r github_organization_block organization blocking-users write
r github_organization_custom_properties organization custom-properties admin
r github_organization_role organization custom-organization-roles read
r github_organization_role_team organization members write
r github_organization_role_user organization members write
r github_organization_role_team_assignment organization members write
r github_organization_ruleset organization administration write
r github_organization_security_manager organization custom-organization-roles read
r github_organization_security_manager organization members write
r github_organization_settings organization administration write
r github_organization_webhook organization webhooks write
r github_release organization members read
r github_release repository contents write
r github_release repository metadata read
r github_release repository workflows write
r github_repository repository administration write
r github_repository repository contents read
r github_repository repository metadata read
r github_repository repository pages write
r github_repository repository repository-creation write
r github_repository_autolink_reference repository administration write
r github_repository_dependabot_security_updates repository administration write
r github_repository_collaborator repository administration write
r github_repository_collaborator repository metadata read
r github_repository_collaborator user private-repository-invitations read
r github_repository_collaborators organization members read
r github_repository_collaborators repository administration write
r github_repository_collaborators repository metadata read
r github_repository_collaborators user private-repository-invitations read
r github_repository_custom_property organization custom-properties read
r github_repository_custom_property organization members read
r github_repository_custom_property repository custom-properties write
r github_repository_custom_property repository metadata read
r github_repository_deploy_key repository administration write
r github_repository_deployment_branch_policy repository actions read
r github_repository_deployment_branch_policy repository administration write
r github_repository_environment organization members read
r github_repository_environment repository actions read
r github_repository_environment repository administration write
r github_repository_environment repository metadata read
r github_repository_environment_deployment_policy organization members read
r github_repository_environment_deployment_policy repository actions read
r github_repository_environment_deployment_policy repository administration write
r github_repository_environment_deployment_policy repository metadata read
r github_repository_file organization members read
r github_repository_file repository administration read
r github_repository_file repository contents write
r github_repository_file repository metadata read
r github_repository_file repository workflows write
r github_repository_milestone repository issues write
r github_repository_milestone repository pull-requests write
r github_repository_pages organization members read
r github_repository_pages repository administration write
r github_repository_pages repository metadata read
r github_repository_pages repository pages write
r github_repository_pull_request repository contents read
r github_repository_pull_request repository pull-requests write
r github_repository_ruleset repository administration write
r github_repository_ruleset repository metadata read
r github_repository_topics repository administration write
r github_repository_topics repository metadata read
r github_repository_webhook repository webhooks write
r github_repository_vulnerability_alerts organization members read
r github_repository_vulnerability_alerts repository administration write
r github_repository_vulnerability_alerts repository metadata read
r github_team organization members write
r github_team_members organization members write
r github_team_membership organization members write
r github_team_repository organization members read
r github_team_repository repository administration write
r github_team_settings organization members read
r github_user_gpg_key user gpg-keys write
r github_user_invitation_accepter repository administration write
r github_user_ssh_key user git-ssh-keys write
r github_enterprise_organization organization administration write
r github_enterprise_organization organization members write
r github_actions_organization_workflow_permissions organization administration write
r github_workflow_repository_permissions repository administration write
d github_actions_environment_public_key repository environments read
d github_actions_environment_secrets repository environments read
d github_actions_environment_variables repository environments read
d github_actions_organization_oidc_subject_claim_customization_template organization administration read
d github_actions_organization_public_key organization secrets read
d github_actions_organization_registration_token organization self-hosted-runners write
d github_actions_organization_secrets organization secrets read
d github_actions_organization_variables organization variables read
d github_actions_public_key repository secrets read
d github_actions_registration_token repository administration write
d github_actions_repository_oidc_subject_claim_customization_template repository actions read
d github_actions_secrets repository secrets read
d github_actions_variables repository variables read
d github_branch repository contents read
d github_collaborators repository metadata read
d github_codespaces_organization_public_key organization organization-codespaces-secrets read
d github_codespaces_organization_secrets organization organization-codespaces-secrets read
d github_codespaces_public_key repository codespaces-secrets write
d github_codespaces_secrets repository codespaces-secrets write
d github_codespaces_user_public_key user codespaces-user-secrets read
d github_codespaces_user_secrets user codespaces-user-secrets read
d github_dependabot_organization_public_key organization organization-dependabot-secrets read
d github_dependabot_organization_secrets organization organization-dependabot-secrets read
d github_dependabot_public_key repository dependabot-secrets read
d github_dependabot_secrets repository dependabot-secrets read
d github_issue_labels repository issues read
d github_issue_labels repository pull-requests read
d github_membership organization members read
d github_organization repository metadata read
d github_organization_custom_properties organization custom-properties read
d github_organization_members organization members read
d github_organization_repositories repository metadata read
d github_organization_role organization custom-organization-roles read
d github_organization_role_teams organization members read
d github_organization_role_users organization members read
d github_organization_roles organization custom-organization-roles read
d github_organization_security_managers organization administration read
d github_organization_teams organization members read
d github_organization_webhooks organization webhooks read
d github_organization_app_installations organization administration read
d github_ref repository contents read
d github_release repository contents read
d github_release_asset repository contents read
d github_repository repository metadata read
d github_repository repository pages read
d github_repository_autolink_references repository administration read
d github_repository_branches repository contents read
d github_repository_custom_properties repository metadata read
d github_repository_environments repository actions read
d github_repository_deploy_keys repository administration read
d github_repository_deployment_branch_policies repository actions read
d github_repository_file repository administration read
d github_repository_file repository contents read
d github_repository_milestone repository issues read
d github_repository_milestone repository pull-requests read
d github_repository_pages repository metadata read
d github_repository_pages repository pages read
d github_repository_pull_request repository contents read
d github_repository_pull_request repository pull-requests read
d github_repository_pull_requests repository pull-requests read
d github_repository_teams repository administration read
d github_repository_webhooks repository webhooks read
d github_team organization members read
d github_team_members organization members read
d github_team_repositories organization members read
d github_tree repository contents read
d github_user user git-ssh-keys read
d github_user user gpg-keys read
d github_repository_environment_deployment_policies repository actions read
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment