Set allowed actions for an enterprise

Sets the actions that are allowed in an enterprise. To use this endpoint, the enterprise permission policy for `allowed_actions` must be configured to `selected`. For more information, see "[Set GitHub Actions permissions for an enterprise](#set-github-actions-permissions-for-an-enterprise)." You must authenticate using an access token with the `admin:enterprise` scope to use this endpoint.

PUT/enterprises/{enterprise}/actions/permissions/selected-actions

Source: github-v3-rest.json
Revision: f5f067c1e6f6
Active snapshot: 85e53e3d0d65

Request

Path Parameters

enterprise string required: The slug version of the enterprise name. You can also substitute this value with the enterprise id.

Body Params

required

application/jsonselected-actions object

github_owned_allowed boolean

required

Whether GitHub-owned actions are allowed. For example, this includes the actions in the `actions` organization.

patterns_allowed array[string]

required

Specifies a list of string-matching patterns to allow specific action(s). Wildcards, tags, and SHAs are allowed. For example, `monalisa/octocat@*`, `monalisa/octocat@v2`, `monalisa/*`."

Responses

Response

Request configuration

This OpenAPI document does not declare an authentication scheme. Check the API provider's documentation before sending credentials; Manja cannot infer or validate an undocumented scheme.

Common bearer example: Authorization: Bearer YOUR_ACCESS_TOKEN

hostname

Self-hosted Enterprise Server or Enterprise Cloud hostname

protocol

Self-hosted Enterprise Server or Enterprise Cloud protocol

enterprise *

The slug version of the enterprise name. You can also substitute this value with the enterprise id.

Request Sample: Shell / cURL

curl --request PUT \
  --url {protocol}://{hostname}/api/v3/enterprises/{enterprise}/actions/permissions/selected-actions \
  --header 'content-type: application/json' \
  --data '{
  "github_owned_allowed": true,
  "patterns_allowed": [
    "monalisa/octocat@*",
    "docker/*"
  ],
  "verified_allowed": false
}'