How to automate GitHub with AI agents

Adds new custom labels to an existing self-hosted runner for an organization; existing labels are not removed, and duplicates are not added.

Adds a github user to a team or updates their role (member or maintainer), inviting them to the organization if not already a member; idempotent, returning current details if no …

Grants or updates a team's permissions ('read', 'write', or 'admin') for a specific project, which must exist within the specified organization and be linked to it.

Sets or updates a team's permission level for a repository within an organization; the team must be a member of the organization.

Adds a specified github user as a collaborator to an existing organization project with a given permission level.

Adds a repository to an existing organization-level github actions secret that is configured for 'selected' repository access.

Grants an existing repository access to an existing organization-level dependabot secret; the repository must belong to the organization, and the call succeeds without change if …

Adds and appends custom labels to a self-hosted repository runner, which must be registered and active.

Adds a repository to an organization secret's access list when the secret's visibility is 'selected'; this operation is idempotent.

Grants a repository access to an organization-level github actions variable, if that variable's visibility is set to 'selected repositories'.

Adds one or more social media links (which must be valid, full urls for platforms supported by github) to the authenticated user's public github profile.

Adds status check contexts (provided in the request body, e.g., `{\

Overwrites the list of teams (and their child teams) granted push access to a protected branch; the list of team slugs must be provided in the http post request body.

Sets/replaces list of users allowed to push to a protected branch; usernames (e.g., `[\

Sets or replaces the list of organization members granted codespaces access billed to the organization; ensure the organization's billing settings allow access for selected membe…

Approves a workflow run from a forked repository's pull request; call this when such a run requires manual approval due to workflow configuration.

Assigns an existing organization-level role (identified by `role id`) to a team (identified by `team slug`) within a github organization (`org`), provided the organization, team,…

Assigns a specific organization role to a user who is a member or an outside collaborator in a github organization, using a valid role id.

Lists docker packages for the authenticated user that encountered conflicts during the docker migration process.

Blocks an existing individual github user (not an organization or your own account), preventing them from interacting with your account and repositories.

Blocks an existing github user from an existing organization, preventing their contributions, collaboration, and forking of the organization's repositories.

Cancels an existing, ongoing or queued github pages deployment for a repository using its `pages deployment id`.

Cancels a workflow run in a github repository if it is in a cancellable state (e.g., 'in progress' or 'queued').

Checks if a github app or oauth access token is valid for the specified client id and retrieves its details, typically to verify its active status and grants.

Checks if a gist, identified by `gist id`, is starred by the authenticated user, returning an empty response (204) if starred, or a 404 error if not starred or not found.

Checks if the authenticated github user follows a target github user; an http 204 status indicates the user is followed, while an http 404 status indicates the user is not follow…

Checks if a specified github pull request has been merged, indicated by a 204 http status (merged) or 404 (not merged/found).

Use to determine if the authenticated user has starred a specific github repository, which is confirmed by an http 204 status (resulting in an empty dictionary in the response da…

Verifies if a github user can be assigned to issues in a repository; assignability is confirmed by an http 204 (no content) response, resulting in an empty 'data' field in the re…

Checks if a specified github user can be assigned to a given issue within a repository.

Checks if a github user `username` follows `target user`; returns a 204 http status if true, 404 if not or if users are invalid.

Checks if a user is a collaborator on a specified github repository, returning a 204 status if they are, or a 404 status if they are not or if the repository/user does not exist.

Checks if a github user is blocked by an organization; a successful response (204 no content) indicates the user is blocked, while a 404 not found error indicates the user is not…

Checks if the specified github user is blocked by the authenticated user; a 204 no content response indicates the user is blocked, while a 404 not found indicates they are not.

Checks if private vulnerability reporting is enabled for the specified repository.

Checks if a team has 'read', 'write', or 'admin' permissions for an organization's specific classic project, returning the project's details if access is confirmed.

Checks a team's permissions for a specific repository within an organization, including permissions inherited from parent teams.

Deletes github actions caches from a repository matching a specific `key` and an optional git `ref`, used to manage storage or clear outdated/corrupted caches; the action succeed…

Removes all custom labels from a self-hosted runner for an organization; default labels (e.g., 'self-hosted', 'linux', 'x64') will remain.

Compares two commit points (commits, branches, tags, or shas) within a repository or across forks, using `base...head` or `owner:ref...owner:ref` format for the `basehead` parame…

Generates a jit configuration for a github organization's new self-hosted runner to run a single job then unregister; the runner group id must exist.

Sets or updates the oidc subject claim customization template for an existing github organization by specifying which claims (e.g., 'repo', 'actor') form the oidc token's subject…

Converts an existing organization member, who is not an owner, to an outside collaborator, restricting their access to explicitly granted repositories.

Creates a git blob in a repository, requiring content and encoding ('utf-8' or 'base64').

Creates a new check run for a specific commit in a repository, used by external services to report status, detailed feedback, annotations, and images directly within the github ui.

Creates a new check suite for a specific commit (`head sha`) in an original repository (not a fork); github dispatches a `check suite` webhook event with the `requested` action u…

Creates a github codespace for the authenticated user, requiring a json request body with either `repository id` (integer) or a `pull request` object (containing `pull request nu…

Creates a github codespace for an open pull request in a codespaces-enabled repository, with options to customize its configuration.

Creates a github codespace for the authenticated user in a specified repository, which must be accessible and use a valid `devcontainer.json` if `devcontainer path` is specified.

Creates a new commit in a github repository; the `tree` sha and any `parents` shas must already exist in the repository.

Creates a comment on a specific commit, or on a specific line if `path` and `position` are provided.

Sets a commit's status (e.g., error, failure, pending, success from ci/cd) for a given sha; max 1000 statuses per sha/context.

Creates a custom role with defined permissions within a github organization.

Creates a deploy key for a repository; the repository must exist and be accessible, and the provided key must be a valid public ssh key.

Creates a github deployment for an existing repository, targeting a specific ref (branch, tag, or sha) that must also exist within the repository.

Creates a deployment branch or tag policy for an existing environment in a github repository, using a ruby file.fnmatch pattern (where `*` doesn't match `/`) to specify which bra…

Creates a status for an existing deployment, updating its operational state, associated urls, and description.

Creates a new discussion post on a specific team's page within an organization.

Creates a new comment on an existing team discussion within a github organization.

Creates a fork of an accessible repository, optionally into a specific organization, with a new name, or copying only the default branch.

Creates a new gist on github with provided files, an optional description, and public/secret visibility.

Creates a new comment on a specified github gist.

Use this action to finalize a github app's creation by exchanging the temporary `code` (received as a url parameter during the app manifest setup redirection) for the app's full …

Creates a github pages deployment for a repository using a specified artifact and oidc token, provided github pages is enabled and the artifact (containing static assets) is acce…

Configures or updates github pages for a repository, setting build type and source; ensure a pages workflow exists for 'workflow' `build type`, or `source branch` exists for 'leg…

Creates a new label in a specified github repository, provided the repository exists and the user has write permissions.

Creates a milestone in a github repository for tracking progress on issues or pull requests; requires repository existence and user write permissions.

Creates a repository autolink to automatically convert text references (e.g., 'ticket-123') into hyperlinks, using a unique `key prefix` and a `url template` that includes `<num>`.

Creates an encrypted environment variable for a pre-existing environment within a github repository; will fail if the variable name already exists.

Creates a new issue in a github repository, requiring the repository to exist and have issues enabled; specific fields like assignees, milestone, or labels may require push access.

Creates a new comment on an existing github issue or pull request within the specified repository.

Creates a new classic project board within a specified github organization.

Creates a new repository within a specified github organization, with options for detailed configuration including visibility, features, merge strategies, initial commit, and tem…

Creates a new, uniquely named github actions variable for an organization, with configurable repository access visibility (all, private, or selected).

Creates a webhook for a github organization to deliver event notifications to a configured url.

Creates a project card in a github project column; the request body must contain either a `note` for a note-only card, or both `content id` (id of an issue or pull request) and `…

Creates a new column in a github project (classic).

Creates a pull request in a github repository, requiring existing `base` and `head` branches; `title` or `issue` must be provided.

Creates a git reference (e.g., a branch or tag) in a repository; the repository must not be empty prior to this operation.

Generates a temporary (one-hour) registration token to add a new self-hosted runner to an organization for github actions.

Generates a time-limited token required to register a new self-hosted runner with a specific repository.

Creates a release in a github repository for a specified tag; the tag must be unique for published releases, and if a `discussion category name` is given, it must already exist.

Generates a token, valid for one hour, to authenticate removing a self-hosted runner from an organization.

Generates a temporary (one-hour validity) token required to unregister and remove a self-hosted runner from a repository.

Posts a reply to a specific review comment on a github pull request, requiring the repository, pull request, and original comment to exist, and a non-empty reply body.

Triggers a github actions workflow or a webhook on a repository by creating a repository dispatch event, allowing programmatic triggering of workflows based on events outside of …

Creates a new repository for the authenticated user, optionally within an organization if `team id` is specified.

Publishes the specified codespace to a new repository, using the codespace's current state as the initial commit.

Creates a new classic project board within a specified repository; classic projects must be enabled for the target repository.

Creates a uniquely named ruleset for a repository, defining rules for branches or tags with specified enforcement, conditions, and bypass actors.

Creates a new repository from an existing template repository; the authenticated user must have access to the template and, if creating in an organization, repository creation pe…

Creates a new, unencrypted variable in a repository for github actions workflows; fails if a variable with the same name already exists.

Creates a webhook for a specified repository; requires admin permissions on the repository.

Creates a review comment on a pull request's diff, targeting a specific line, range of lines, an entire file, or replying to an existing comment.

Creates a pull request review, allowing approval, change requests, or comments; `body` is required if `event` is `request changes` or `comment`, and omitting `event` makes the re…

Exchanges a user-to-server token for a new, fine-grained scoped access token for a github app, requiring `client id`, `access token`, either `target` or `target id`, and at least…

Creates a snapshot of a repository's dependencies to populate the github dependency graph and enable security alerts; `sha` must be a 40-character commit id, `ref` a fully qualif…

Creates an annotated git tag object in a repository, pointing to an existing git object (commit, tree, or blob) defined by its sha and ensuring the `type` field correctly specifi…

Creates a tag protection rule for a repository using a glob pattern; note: tag protections are deprecated (sunset august 30, 2024), migrate to repository rulesets.

Creates a new team in an organization, optionally with maintainers, repositories, specific privacy, notification settings, or a parent team; if `parent team id` is given, `privac…

Creates a temporary private fork of the specified repository to address a security vulnerability, linking the fork to a ghsa id that must be specifically associated with this rep…

Creates a new git tree object in a repository, defining file/directory structure by specifying tree entries, optionally building on a `base tree` sha; all provided shas must be v…

Creates a new github project board for the authenticated user to organize and track issues, pull requests, and notes.

Manually triggers a github actions workflow identified by `workflow id` at a given `ref`, if the workflow is configured to accept `workflow dispatch` events.

Enables commit signature protection for a specified branch, requiring all new commits to be signed.

Enables a custom deployment protection rule for an existing environment in a repository by linking a configured github app (via `integration id`) to control deployments.

Generates a temporary just-in-time (jit) configuration for a new self-hosted github actions runner for a repository; any specified non-default `runner group id` must be an existi…

Creates a new custom property (name must be unique for creation) or updates an existing one for an organization to define metadata for its repositories.

Creates a new environment or updates an existing one in a github repository, allowing configuration of deployment protection rules such as wait timers and reviewers; ensure `envi…

Creates or updates an environment secret with an `encrypted value` that was encrypted using the public key identified by `key id` for the specified environment.

Creates or updates an organization secret for github actions, requiring its value to be pre-encrypted via libsodium using the organization's public key.

Creates or updates a github actions secret within a specific repository; use `encrypted value` and `key id` to set or change its value.

Creates or updates a codespaces secret for the authenticated user; `encrypted value` must be encrypted with the public key (id: `key id`) from github's 'get public key for the au…

Creates new custom property schemas or updates existing ones in bulk for a specified organization; each property definition must include `property name` and `value type`.

Creates or updates up to 30 custom property values for a repository; custom properties must be predefined at the organization or repository level, and setting a property's value …

Creates a new file or updates an existing file in a github repository; provide `sha` to update an existing file, otherwise a new file is created.

Creates or updates a dependabot secret in a repository using an `encrypted value` (pre-encrypted with libsodium using the repository's dependabot public key) and its correspondin…

Creates an emoji reaction for a commit comment; if the user has already reacted with the same content, details of the existing reaction are returned.

Creates a reaction for a specified issue within a github repository.

Creates a reaction for a specific comment on an issue within a github repository.

Adds a specified reaction to a pull request review comment within a github repository.

Creates an emoji reaction for a specific, existing release in a github repository.

Creates a reaction for a team discussion within a github organization.

Adds a reaction to a team discussion comment, requiring the specified organization, team, discussion, and comment to exist.

Creates or updates a dependabot organization secret, requiring the secret value to be pre-encrypted with libsodium using the organization's public key obtained from the 'get an o…

Retrieves the openid connect (oidc) subject claim customization template for a repository, which defines the `sub` claim structure in oidc tokens for github actions workflows; re…

Retrieves the openid connect (oidc) subject claim customization template for a github organization, which defines how the `sub` claim in oidc tokens for workflows is constructed.

Sets the openid connect (oidc) subject claim template for a github repository, allowing use of the default template or a custom one defined by `include claim keys` if `use defaul…

Declines a specific, pending repository invitation for the authenticated user, identified by its `invitation id`.

Removes all user, team, and app-based access restrictions from a protected branch.

Deletes a specific code scanning analysis by its id from a repository; `confirm delete` must be `true` if it's the last analysis of its type for a given tool and reference to pre…

Deletes a specific codespace owned by the authenticated user; this is a destructive action and the codespace must exist.

Permanently deletes a specific codespace belonging to a member of the specified organization.

Deletes a specific commit comment, identified by its `comment id`, from the specified repository; the comment must exist.

Deletes a reaction from a commit comment in a github repository.

Deletes a custom organization role (which should not be actively assigned) by its id; a 204 no content response indicates success.

Deletes a specific deploy key from a repository; to change a key's properties or access scope, the existing key must be deleted and a new one created.

Permanently deletes a specified *inactive* deployment from a repository.

Deletes a specific deployment branch or tag policy, identified by its id, from a given environment within a repository.

Deletes a specific team discussion, identified by its number, from an organization's team.

Deletes a specific comment from an existing team discussion within an organization, provided the specified organization, team, discussion, and comment all exist.

Removes admin enforcement from a protected branch (branch name cannot contain wildcard characters) in a repository.

Deletes a file by path from a github repository, requiring a commit message and the file's current blob sha to confirm the deletion.

Permanently deletes an existing github gist, specified by its `gist id`; this action is destructive and cannot be undone.

Deletes a specific comment from a github gist using its `gist id` and `comment id`.

Deletes the github pages site for the specified repository; completes without error if no site is currently enabled.

Permanently removes an existing label from a repository.

Deletes the specified milestone if it exists; this operation is idempotent, typically returning a 404 if the milestone is not found or already deleted.

Revokes a single, specific oauth access token for an oauth app, not all authorizations for the app.

Revokes an oauth access token for a github app, if the app exists and the token was issued to it.

Deletes a github artifact by its id within a repository, typically resulting in an empty response (http 204 no content) on success.

Deletes a specific autolink reference (which automatically links external resource ids like jira-123 to urls) from the specified repository.

Sends an empty request body to `delete /user/emails` to attempt deletion of user email addresses; the api typically requires specific emails, so outcome may vary.

Deletes an existing deployment environment from an existing repository.

Deletes an existing and accessible secret from a specified environment within a github repository, returning an empty dictionary on success or error details otherwise.

Deletes a named environment variable from a specified, existing environment within a github repository.

Permanently deletes a specific comment by its id from an issue or pull request, if the repository exists and the comment id is valid.

Deletes a reaction from an issue comment in a repository; the repository, comment, and reaction must exist.

Permanently removes a specific reaction from an issue in a github repository.

Deletes a github organization and its repositories; this is a destructive action and the organization name will be unavailable for reuse for approximately 90 days.

Permanently deletes a secret from a github organization, making it inaccessible to github actions workflows or other tools.

Deletes a named github actions variable from a specified organization.

Deletes a specific webhook, identified by `hook id`, from an existing organization.

Deletes a specific package in an organization; cannot delete public packages with over 5,000 downloads.

Deletes a package owned by the specified user, requiring admin permissions for the authenticated user; deletion of public packages with over 5,000 downloads may require github su…

Permanently deletes a specific package owned by the authenticated user; public packages downloaded over 5,000 times cannot be deleted via this api.

Deletes an existing package version associated with the authenticated user.

Deletes a pending (unsubmitted) review from a pull request; this is only possible if the review has not yet been submitted.

Deletes the github project specified by `project id` if the project exists and the projects feature is enabled for its repository or organization; a successful deletion results i…

Deletes a project card from a github 'project (classic)'; this operation is idempotent.

Deletes a project column by its id from a github project (classic); this is a destructive operation.

Deletes a specific reaction from a pull request review comment, provided the comment and reaction exist on that comment within the specified repository.

Deletes a git reference from a repository; 'ref' must be fully qualified (e.g., 'refs/heads/branch' or 'refs/tags/tag').

Permanently deletes a specific release, its assets, and potentially its associated git tag from a repository.

Deletes a specific release asset from a github repository; this action is idempotent.

Deletes a reaction from a github release, provided the repository, release, and reaction exist.

Permanently deletes the specified repository; this is a destructive, irreversible action that requires admin privileges for the repository.

Deletes an active repository invitation, permanently revoking a user's access to collaborate on the specified repository.

Permanently deletes a repository ruleset.

Deletes a named github actions secret from a specified repository; this operation is destructive and idempotent, and requires the repository to exist.

Deletes the authenticated user's subscription to a specified repository if it exists, effectively 'unwatching' it.

Deletes a named variable (e.g., for github actions workflows) from a repository; the repository and the variable must already exist.

Deletes a specific webhook from a repository.

Deletes a specific pull request review comment.

Deletes an existing codespaces secret for the authenticated user by `secret name`; this is a destructive, irreversible, and idempotent operation.

Deletes an existing and registered self-hosted runner from an organization, typically returning 204 no content on success.

Removes a specific self-hosted runner (by `runner id`) from a repository, if registered there; this is idempotent.

Permanently deletes a specific tag protection rule, identified by its id, from the given repository.

Deletes a team (and any child teams) from an organization.

Call this to mute a specific notification thread by deleting the user's subscription; notifications may still occur if the user is @mentioned, comments, or due to repository watc…

Deletes a specific workflow run from a repository.

Removes all protection rules from a specific branch in a github repository; the branch must currently have protection rules enabled.

Disables gpg commit signature protection for a specific branch in a github repository, meaning commits pushed to this branch no longer require gpg signing.

Deletes a specific dependabot secret, identified by its name, from a given repository if both the repository and secret exist.

Deletes a specific github actions cache from a repository using its unique `cache id`.

Deletes a specific package version within an organization; requires admin permissions for packages with over 5,000 downloads.

Permanently and irreversibly deletes a specific version of a package owned by the specified user.

Disables the requirement for pull request reviews before merging for a specific, existing branch in an existing repository; this action is idempotent and will succeed even if the…

Deletes a specific codespace secret from a repository by its name; this action is idempotent and will succeed even if the secret doesn't exist.

Deletes currently linked social media account urls from the authenticated user's github profile.

Deletes a reaction from a team discussion comment, given the organization name, team slug, discussion number, comment number, and reaction id.

Permanently deletes a specific reaction from a team discussion within an organization.

Deletes all logs for a specific workflow run in a github repository, provided the repository and run exist.

Disables a specific, currently active custom deployment protection rule for an existing environment within a github repository.

Disables a specified workflow (by id or filename) in a given github repository, preventing new automatic triggers; any in-progress runs will continue.

Disables private vulnerability reporting for an existing github repository, preventing direct private vulnerability reports to maintainers via github's interface for this reposit…

Disables github actions for a specific repository within an organization; this action is only effective if the organization's github actions `enabled repositories` setting is con…

Dismisses a review on a pull request with a mandatory explanatory message.

Downloads a specific github repository artifact, returning a temporary url to its 'zip' archive, valid for one minute.

Downloads a repository's source code as a tarball (.tar.gz) archive for a specific git reference, if the repository is accessible.

Downloads a repository's source code as a zip archive for a specific git reference (branch, tag, or commit sha).

Downloads logs for a specific job in a github actions workflow run, contingent on the repository's existence and the job id being valid and having produced logs.

Downloads a zip archive of logs for a specific workflow run attempt.

Downloads logs for a specific github actions workflow run, typically archived as a zip file, if logs are available (e.g., not expired and the workflow has produced output).

Reactivates a currently disabled github actions workflow within a repository using its numerical id.

Sets the specific repositories that can use github actions within an organization by replacing the current list; only applies if the organization's actions policy is 'selected re…

Enables private vulnerability reporting for a repository, allowing security researchers to privately submit vulnerability reports to maintainers.

Enables github actions for a repository if the organization's actions permissions are set to allow for 'selected repositories'.

Creates or updates a repository's development environment secret using an `encrypted value` and its corresponding `key id`; the secret must be pre-encrypted with the repository's…

Creates or updates an organization's github codespaces secret using an encrypted value and its corresponding public key id.

Retrieves an organization's public key, which must be used to encrypt secret values before they are configured for codespaces.

Triggers an export of a user's specified codespace, automatically stopping it if active, and returns its export status and download url.

Exports the software bill of materials (sbom) in spdx json format for a repository, if its dependency graph is enabled and it has at least one commit.

Retrieves the public key for an existing github organization, required for encrypting dependabot secrets.

Ai-optimized pull request search with smart filtering by repo, author, state, labels, and merge status. builds intelligent search queries and returns clean, actionable pr data.

Ai-optimized repository search with smart filtering by language, stars, topics, and ownership. builds intelligent search queries and returns clean, actionable repository data.

Allows the authenticated user to follow the github user specified by `username`; this action is idempotent and the user cannot follow themselves.

Forcefully cancels an existing github actions workflow run, bypassing normal cancellation conditions; requires write permissions to the repository.

Forks a specified public gist, creating a copy under the authenticated user's account.

Generates markdown release notes content (listing changes, pull requests, and contributors) for a github repository release, customizable via tags and a configuration file.

Retrieves the raw, typically base64-encoded, content of a file (blob) from a github repository using its sha hash, if the repository and blob sha exist.

Retrieves detailed information for a specified branch within a github repository.

Lists users, teams, and github apps with push access to a branch; this branch must be protected in repository settings for detailed restrictions, otherwise expect a 404 or empty …

Retrieves detailed information for a specific check run within a github repository.

Retrieves a specific check suite (a collection of check runs) by its id from a repository accessible to the authenticated user.

Retrieves details for a specific github classroom; the classroom id must correspond to an existing classroom.

Retrieves the full details of a specific github code of conduct using its unique key.

Gets an existing codeql database (including a download url) for a specified language in an accessible repository, if one has been successfully built for that language.

Retrieves a specific code scanning alert, which identifies potential code vulnerabilities or errors, by its number from the specified github repository.

Retrieves detailed information for a specific code scanning analysis on an accessible repository, identified by its `analysis id`.

Gets the default setup configuration for code scanning in a repository, including state, languages, query suite, and schedule for a repository if it exists.

Call to retrieve detailed information for a `codespace name` belonging to the authenticated user, ensuring the codespace exists and is accessible.

Retrieves a specific commit from a repository by its owner, name, and a valid commit reference (sha, branch, or tag), supporting pagination for large diffs.

Retrieves the full details of a specific commit comment in a github repository, using its unique identifier.

Retrieves detailed information (including author, committer, message, tree, parents, verification) for a specific commit in a github repository, identified by its sha.

Retrieves a specific custom deployment protection rule (used by github apps for external validation or manual approval of deployments) for a given environment in a repository.

Retrieves the definition (schema) of a specific, existing custom property for an organization.

Retrieves a specific delivery for a repository webhook, identified by its `hook id` and `delivery id`.

Gets a specific deploy key, identified by its `key id`, for the github repository specified by `owner` and `repo`.

Gets a specific deployment by id from a repository, provided the repository and deployment id exist.

Retrieves a specific deployment branch policy for an environment in a repository, identified by its unique id.

Retrieves a specific deployment status by its id for a given deployment within a github repository.

Gets the dependency diff between two git revisions in a repository, where 'basehead' specifies the revisions and 'name' can optionally scope to a specific manifest file.

Fetches a specific discussion by its number from a team within an organization.

Fetches a specific comment from a team discussion within a specific organization.

Checks if repository administrators are subject to the branch protection rules on a specific branch.

Retrieves the dns health check status (e.g., cname/a records, https) for a github pages site; the check may be pending (http 202) on initial calls or after site changes.

Fetches a specific github gist by its `gist id`, returning comprehensive details if the gist exists.

Retrieves a specific gist comment by its id and the gist's id.

Retrieves a specific revision of a gist.

Retrieves information for a github pages site, which must be enabled for the repository.

Retrieves a specific .gitignore template from github by its name, which must be an existing template in github's collection.

Retrieves detailed information for a specific job within a github actions workflow run, given its `job id` which must be valid for the specified repository's workflow.

Retrieves a specific label by its name from a specified github repository.

Call this action to retrieve comprehensive details for a specific software license recognized by github, using its unique license key.

Retrieves all officially supported, date-based (e.g., \

Retrieves all autolinks (e.g., for jira issues) configured for a repository; requires admin permissions on the repository.

Retrieves all available codes of conduct from github, often used to select one for a repository.

Retrieves a list of commonly used software licenses from github, optionally filtering for 'featured' licenses whose specific selection criteria by github may vary.

Retrieves commit activity (total commits, weekly additions/deletions/commits) for all contributors to a repository; may require a retry if github returns 202 while preparing data.

Gets the schema definitions for all custom properties configured for an organization, not the specific values assigned to repositories.

Gets all custom property values for a repository, which may include default values or be empty if no properties are explicitly set.

Lists all enabled custom deployment protection rules for a specific environment in a repository; the environment must exist and be configured for deployments.

Retrieves all available .gitignore template names from github (e.g., 'python', 'node', 'java'), used for generating .gitignore files.

Lists all custom organization roles for an existing github organization.

Retrieves all rulesets for a github repository, which define conditions and actions for repository interactions (e.g., branch protections).

Retrieves all topics for a specified, existing, and accessible repository.

Gets all users and teams requested to review a specific pull request in a repository.

Fetches all required status check contexts for a protected branch; returns an empty list if the branch isn't protected or has no required checks.

Retrieves detailed information for a specific milestone within a github repository by its number.

Retrieves publicly available information for an existing github app, identified by its unique url-friendly `app slug`.

Gets a specific artifact for a repository by `artifact id`.

Retrieves detailed information for a specific github classroom assignment if the authenticated user is an administrator of the classroom.

Retrieves a specific autolink reference (which automatically hyperlinks text like 'jira-123' to an external system) for a repository using its unique id; requires administrator a…

Get an environment

Retrieves the public key for a specified github repository environment, used to encrypt secrets for github actions.

Get an environment secret

Get an environment variable

Get an issue

Get an issue comment

Get an issue event

Get an organization

Get an organization public key

Retrieves a specific github organization role by its id.

Gets an organization secret's metadata (e.g., name, creation/update dates, visibility), but not its encrypted value.

Retrieves details (name, value, visibility, timestamps) of a specific, existing variable for an existing github organization.

Retrieves the full configuration, including subscribed events and delivery settings, for an existing organization webhook.

Retrieves a specific package (by type and name) from an organization, if both the package and organization exist.

Retrieves metadata for a specific package owned by a github user, using package type, name, and username as identifiers.

Retrieves detailed information for a specific package owned by the authenticated user.

Retrieves detailed information for a specific version of a package within an organization.

Retrieves a specific public package version associated with a github user.

Retrieves detailed information for an existing specific package version associated with the authenticated user, identified by its type, name, and version id.

Lists github apps with push access to a repository's protected branch.

Retrieves detailed information for a specific github project using its unique `project id`.

Retrieves all details of a specific project card, given its unique `card id`.

Retrieves detailed information for a specific project column; the column must exist.

Retrieves a specific pull request from a github repository using its owner, repository name, and pull request number.

Retrieves a specific git reference (e.g., a branch, tag, or fully qualified like 'heads/main') from a github repository.

Gets a specific release from a github repository, provided the repository is accessible and the release exists.

Gets metadata for a specific release asset in a github repository, including a `browser download url` for downloading the asset.

Gets a release from a github repository by its tag name; the repository and a release with this tag must already exist.

Retrieves detailed information about an existing and accessible github repository.

Gets a repository's public key for encrypting secrets to be used in github actions, if the repository exists and is accessible.

Fetches the readme file (if it exists and is accessible) from a specified github repository, returning its base64-encoded content and metadata.

Retrieves the readme file from a specified directory within a github repository, optionally at a given commit, branch, or tag.

Retrieves a specific repository ruleset by its id; if `includes parents` is true, the search for this `ruleset id` also extends to rulesets from parent organizations.

Gets detailed information for a specific repository rule suite by its id, including its evaluation status and the results of its individual rules.

Gets metadata (name, creation/update timestamps) for an existing repository secret, excluding its encrypted value.

Gets the authenticated user's subscription details for a repository, indicating if they receive notifications.

Gets a specific github actions variable by name from an accessible repository.

Returns the configuration of an existing webhook for a given repository.

Retrieves a specific pull request review comment by its id, provided the repository exists, is accessible, and the comment id is valid.

Retrieves a specific review for a pull request using its owner, repository, pull request number, and review id.

Retrieves metadata (name, timestamps, visibility; not the value) for a specific, existing development environment secret associated with the authenticated user's github codespaces.

Retrieves detailed information about a specific self-hosted runner registered within a github organization.

Gets a specific self-hosted runner for a repository by its unique id.

Retrieves all grades for an existing github classroom assignment.

Retrieves detailed information for a specific git tag object from a github repository, using the sha of the tag object itself.

Retrieves a github team by its slug from a specific organization.

Retrieves a specific github notification thread using its unique `thread id`.

Retrieves the authenticated user's subscription details for a specific notification thread, identified by `thread id`.

Retrieves a git tree (directory listing) from a github repository using its sha, branch name, or tag name, optionally fetching all nested items recursively.

Retrieves the public profile information for an existing github user, specified by their username.

Retrieves the configuration for a specific webhook associated with a github organization.

Returns the configuration for an existing webhook on the specified repository.

Returns detailed information for a specific delivery attempt of a webhook configured for the specified github organization.

Retrieves detailed information for a specific github actions workflow in a repository, identified by either its numeric id or its filename.

Gets a specific workflow run by its id from a github repository.

Retrieves detailed information for a specific attempt of a workflow run in a github repository, including its status, conclusion, and timings.

Retrieves branch protection settings for a specific, existing, and accessible branch in a github repository; protection feature availability varies by github product plan.

Fetches commit authors identified during a repository import, used to map authors from an external vcs to github accounts.

Gets the commit signature protection status for a branch in a repository.

Retrieves a repository's community profile metrics, including health percentage and the presence of key community files (e.g., readme, license).

Gets contextual hovercard information for a github user; `subject type` and `subject id` can be jointly provided for more specific details.

Get pre-flight data (e.g., default location, devcontainer path) for creating a codespace in a given repository (must exist and be accessible), optionally for a specific git ref.

Gets the default github token workflow permissions and settings for a github organization.

Gets the default workflow permissions (`read` or `write`) for the github token and whether it can approve pull request reviews in an existing and accessible repository.

Retrieves detailed information about a specific export of a codespace.

Lists all emojis available for use on github, including custom and unicode emojis.

Fetches a list of available github feed urls for the authenticated user.

Retrieves total github actions cache usage statistics for an organization, including active cache count and size across all repositories.

Retrieves the total count of active github actions caches and their combined size in bytes for a specified repository.

Gets the github actions permissions for a specified organization, detailing repository enablement and allowed actions policies.

Gets the github actions permissions policy for a repository, including its enabled status and the scope of allowed actions.

Fetches github's publicly available metadata, useful for configuring network security policies or ip allow-listing.

Retrieves detailed information about a specific github pages build for a repository, which must have github pages enabled.

Retrieves detailed information, including processing status and results url, about a specific sarif (static analysis results interchange format) upload for a repository, uniquely…

Retrieves interaction restrictions for an organization, showing which github user types can interact with its public repositories and when restrictions expire; returns an empty r…

Retrieves active interaction restrictions for a repository, detailing which user groups are limited from activities like commenting or creating pull requests, and when these rest…

Retrieves currently active interaction restrictions for the authenticated user's public repositories.

Lists files larger than 100mb identified during a previous source import for the specified repository; this endpoint is deprecated and will be removed on april 12, 2024.

Retrieves information about the most recent github pages build for a repository, which must exist, be accessible, have github pages enabled, and have at least one prior build.

Fetches an ascii art representation of github's octocat, suitable for text-based displays.

Retrieves the github actions permissions policy, including allowed actions and reusable workflows, for a specified organization.

Retrieves metadata for a specific secret available to an organization's github codespaces without exposing its encrypted value.

Retrieves page view statistics for a repository over the last 14 days, including total views, unique visitors, and a daily or weekly breakdown.

Retrieves pending deployment environments for a specific workflow run that are awaiting approval due to protection rules.

Retrieves a collaborator's permission level (admin, write, read, or none) for an existing github project.

Retrieves a repository's public key for encrypting github codespaces secrets; requires `repo` scope or equivalent read access to codespaces secrets for private repositories.

Retrieves the authenticated user's public github key, used to encrypt secrets for github codespaces.

Retrieves the pull request review protection settings for a specific branch in a github repository, if such protection is configured.

Retrieves the authenticated user's current github api rate limit status, including usage and limits across different resource categories.

Gets metadata (name, creation/update timestamps) for a specific, existing development environment secret (codespaces secret) in a repository, without exposing its value.

Retrieves the total number of clones and a breakdown of clone activity (daily or weekly) for a specified repository over the preceding 14 days.

Retrieves a file's base64 encoded content or a directory's metadata (but not a listing of its contents) from a github repository path.

Retrieves a specific user's permission level ('admin', 'write', 'read', or 'none') for a given repository, where 'maintain' role is reported as 'write' and 'triage' as 'read'.

Retrieves metadata for an existing dependabot secret in a repository, without exposing its encrypted value.

Retrieves all active rules for a specific branch in a github repository, excluding rules in 'evaluate' or 'disabled' status.

Retrieves metadata (e.g., name, creation/update timestamps, visibility) for an organization's dependabot secret, without its encrypted value.

Retrieves the status check protection settings for a specific branch in a github repository, if status check protection is enabled for it.

Retrieves a user's role and membership status within a specific team in an organization.

Lists teams with explicit push access to a protected branch, provided team restrictions are configured in the branch's protection settings; returns an empty list otherwise.

Gets the profile information for the currently authenticated github user, including potentially private details based on user settings.

Retrieves the aggregated commit status (e.g., success, failure, pending) from all checks for a specific reference (sha, branch, or tag) in a github repository.

Retrieves the 'punch card' data, showing hourly commit counts for each day of the week for an existing and accessible repository.

Fetches weekly commit totals and daily commit counts for the last 52 weeks for a specified github repository.

Fetches the latest official (non-prerelease, non-draft) release for a github repository; requires at least one such published release.

Retrieves the license file and its details for a repository, optionally from a specific git reference (branch, tag, or commit sha).

Retrieves the detailed approval history for a specific workflow run in a github repository, detailing each review's environment, state, reviewer, and comments, to track the appro…

Retrieves the status of a specific github pages deployment for a repository, which must have github pages enabled.

Fetches the weekly commit activity (additions and deletions per week) for a repository over the past year; best for repositories with under 10,000 commits.

Retrieves the weekly commit count for a repository, detailing commits by the owner and all contributors over the last 52 weeks; github may return a 202 status or an empty respons…

Retrieves a random quote from github's 'zen of github' collection, reflecting github's design philosophies and offering humorous insights, useful for displaying github wisdom or …

Fetches the top 10 most viewed content paths for a repository from the last 14 days.

Fetches the top 10 websites that referred traffic to a repository within the last 14 days.

Lists users with explicit push access to a protected branch, provided its protection rule restricts pushes to specific users.

Gets the access level settings for a private repository, determining how workflows outside this repository can use its actions and reusable workflows.

Gets the billable time, in milliseconds, for a specific workflow run, detailing time spent on various operating systems.

Gets the billable time (in milliseconds, broken down by runner os) for a specific workflow within a repository for the current billing cycle.

Retrieves a map of all top-level github rest api resource urls and their templates.

Gets the settings for allowed actions and reusable workflows that can be run in the specified repository.

Replaces all custom labels for a specific self-hosted runner in a repository; an empty list for `labels` removes all existing custom labels.

Lists accepted assignments (student repositories created after acceptance) for an existing github classroom assignment, identified by its unique `assignment id`.

Lists github app installations accessible to the authenticated user via their access token, including installation details, permissions, and repository access.

Lists github actions workflow artifacts for a specified repository, which must exist.

Lists github issues for the authenticated user, defaulting to 'assigned' but filterable by other interactions, state, labels, and time, with sorting and pagination.

Lists users who can be assigned to issues in a repository, typically those with push access.

Lists all assignments for a given github classroom `classroom id`; the classroom must exist and be accessible.

Lists machine types available for github codespaces in a repository, optionally using a git ref to check compatibility based on prebuild availability and devcontainer configurati…

Lists branches for an existing github repository, with an option to filter by protection status.

Lists branches in an accessible repository where the provided commit sha is the head, useful for identifying development lines based on that commit.

Lists annotations for a specific check run in a github repository, detailing issues like errors or warnings on particular code lines.

Lists check runs for a given git reference within a repository; ensure the reference exists and the repository is accessible.

Lists check runs for a specific check suite in a github repository, optionally filtering by check name or status.

Lists check suites for a git reference (commit sha, branch, or tag) in a repository, optionally filtering by github app id or check run name.

Lists the immediate child teams of a parent team within an organization.

Lists github classrooms to which the authenticated user has administrative access.

Lists syntax errors in a repository's codeowners file, which must be located at the root, `.github/`, or `docs/` directory for the specified ref.

Lists all codeql databases for a repository where codeql analysis has been previously run and completed.

Lists code scanning alerts for a github organization; use either `tool name` or `tool guid` if filtering by tool, not both.

Lists code scanning alerts for a repository, optionally filtering by tool (which must have produced scan results for the repository), git reference, state, or severity.

Lists code scanning analyses for an existing repository, optionally filtering by tool (name or guid), git reference, or sarif id.

Lists all github codespaces owned by a specified member of a given organization.

Lists github codespaces for the authenticated user, optionally filtering by repository id and supporting pagination.

Lists active/pending github codespaces for an existing organization; admins list all, members list their own.

Lists all comments for a specific review on a github pull request.

Retrieves all comments for a specific commit in a github repository, supporting pagination.

Lists all commit comments for a specified repository, which must exist and be accessible.

Retrieves commits for a repository, optionally filtering by sha (must be valid commit sha or existing branch), path, author, committer, or date range.

Lists commits for a pull request; requires the repository and pull request to exist and be accessible, and supports pagination.

Lists commit statuses for a specific reference (commit sha, branch, or tag) in a repository, useful for tracking ci/test outcomes.

Lists custom property values for repositories in a specified, existing organization, optionally filtered by a repository query.

Retrieves a list of webhook deliveries for a specific webhook in an organization, allowing inspection of delivery history and details.

Retrieves delivery attempts for a specific repository webhook to inspect its history; ensure the webhook id exists.

Lists deploy ssh keys for a specified repository; the repository must exist.

Lists all deployment branch policies for a specified environment in a github repository.

Lists deployments for a specified repository; repository must exist.

Lists all statuses for a given deployment in a repository.

Lists all comments for a specific team discussion within an organization.

Lists discussions for a specific team within an organization, with options for sorting, pagination, and filtering by pinned status.

Lists all email addresses for the authenticated user, including their primary status, verification status, and visibility.

Lists all custom deployment protection rule integrations for a repository environment; the `environment name` must be url-encoded.

Retrieves all deployment environments for a specified repository, which are used to configure protection rules and secrets for different software lifecycle stages.

Lists the names and metadata (not values) of secrets for a specified, existing environment within an existing github repository.

Lists all environment variables, which are plaintext key-value pairs for github actions workflows, for a specified environment within a github repository.

Lists public events for the specified github user, or private events if authenticated as that user, in reverse chronological order.

Lists events a specific github user received from followed users and watched repositories; returns private events if authenticated for `username`, otherwise public.

Lists followers for a specified, existing github user.

Lists users following the authenticated github user, returning an empty list if the user has no followers.

Lists forks for a specified repository, which must exist, with options for sorting and pagination.

Lists comments for a specified github gist.

Lists all commits for a specified gist.

Lists all forks for a given github gist id.

Lists public gists for a specified github user.

Lists gists for the authenticated user, with optional filtering by update time and pagination.

Lists github actions caches for a repository, with options to filter by git reference or cache key, and to sort and paginate results.

Lists github pages builds for a repository; github pages must be enabled on the repository for builds to be listed.

Lists github's global security advisories, filterable by various attributes including id, type, ecosystem, severity, and dates.

Lists pending installation requests made by users or organizations for the authenticated github app.

Lists all instances of a specific code scanning alert, optionally filtered by git ref; requires code scanning to be enabled on the repository.

Lists comments for a specified issue in a github repository.

Lists issue comments, including those on pull requests, for an accessible repository.

Retrieves a list of all events for a specific issue within a github repository.

Lists all issue events (e.g., closed, reopened, assigned) for a specified repository.

Lists github issues for the authenticated user across visible repositories, with filtering by user relationship, state, labels, an iso 8601 `since` timestamp (yyyy-mm-ddthh:mm:ss…

Lists jobs for a specific workflow run in a github repository.

Lists jobs, including details like id, status, and steps, for a specific attempt of a github actions workflow run.

Lists all labels for a specified issue in a github repository.

Retrieves all labels for a specified, existing github repository.

Lists all labels assigned to a specific self-hosted runner within a github organization, which are used to route workflows.

Lists all labels assigned to a specific self-hosted runner registered with the given repository.

Lists all labels for issues within a specific milestone in a repository.

Lists available machine types for a specific, accessible codespace, enabling it to be transitioned to a new hardware configuration.

Lists all git references (branches or tags) in a repository that start with the provided partial reference path (e.g., `heads/my-feature` or `tags/v1.2`).

Lists milestones, which track progress for groups of issues and pull requests, for an existing repository, allowing filtering by state and sorting.

Lists notifications for the authenticated user, sorted by most recent update, with filtering and pagination options.

Lists events within a specified organization that were performed by the authenticated user, whose `username` (path parameter) must match the api request credentials.

Lists public and concealed members of a github organization; viewing concealed members requires authenticated user to be an organization member.

Lists projects for a specified github organization, optionally filtering by state and supporting pagination.

Retrieves a list of repositories for a specified github organization, allowing filtering by type and sorting.

Lists github organizations for the authenticated user, sorted by id in ascending order.

Lists github actions secrets available for a specified organization.

Lists public organizations for a specified github user; the `username` must be a valid github handle.

Lists organizations the authenticated github user is a member of, returning details for each organization.

Lists all github actions variables for a specified organization.

Lists all webhooks for a specified github organization; the organization must exist.

Retrieves all fine-grained permissions for a specified github organization, essential for creating or updating custom roles.

Lists issues for the authenticated user within a specified github organization, with options to filter by involvement type, state, labels, and to sort results.

Lists all codespaces secrets available for a specified organization, which must exist.

Lists all versions for a specified package, if it exists and is owned by the given github organization.

Lists repositories in an organization with github actions enabled, for use when the organization's policy restricts actions to a specific list of repositories rather than enablin…

Lists approved fine-grained personal access tokens (pats) with access to resources in a github organization, optionally filtering by owner, repository, permissions, or last usage…

Retrieves a list of an organization's fine-grained personal access token requests (pending, approved, or denied), with options for filtering and sorting.

Lists all dependabot secrets (metadata like names, creation/update timestamps, but not their encrypted values) for a specified organization, which must exist.

Lists outside collaborators for a github organization, with options to filter (e.g., by 2fa status) and paginate results.

Lists all versions for an existing package owned by the authenticated user, identified by its type and name.

Lists github packages for an organization, noting specific interpretations for package type and visibility parameters.

Lists packages for a specified github user, filterable by package type and visibility.

Lists packages of a specific type and visibility within the authenticated user's namespace on github.

Lists all versions of a public package owned by a specific github user, identified by package type, package name, and username.

Lists all pending membership invitations for a specified team within an organization.

Lists all project cards for a given `column id`, which must correspond to an existing project column.

Fetches a list of collaborators for a specified, existing github project.

Lists all of a github project's columns (e.g., 'to do', 'in progress'); project id must identify a valid, accessible project.

Lists the public email addresses for the authenticated user.

Lists public github events, which may be delayed by up to 5 minutes, with support for pagination.

Retrieves public events (up to 90 days old, newest first) for a github repository network, including the repository and its forks.

Retrieves a list of public events for a specified github user, in reverse chronological order.

Lists public events for a specified github user (e.g., activities in repositories they watch or are involved in); the target user's profile must be public, and if blocked by the …

Lists public gists from github, optionally filtering by a 'since' timestamp and supporting pagination; results are generally newest first.

Lists the verified public ssh keys for a specified github user.

Lists public events for a specified github organization, which must exist.

Lists users who have publicly declared their membership in a specified, existing github organization.

Lists all public repositories on github; use the `since` parameter with a repository id from a previous result for pagination.

Lists pull requests for a specified github repository with ai-friendly filtering.

Lists pull requests for a commit; returns merged prs that introduced the commit if on the default branch, or open prs including the commit if on other branches.

Lists all files (including additions, modifications, and removals) associated with a specific pull request in a github repository.

Lists reactions for a specific commit comment; this is a read-only operation.

Lists reactions for a specific, existing issue within an accessible github repository, optionally filtering by content type.

Lists reactions for a specific issue comment in a github repository, optionally filtering by content type.

Lists reactions for a pull request review comment in a repository, optionally filtering by reaction type.

Lists all reactions, or optionally filters reactions by a specific content type, for a given github release.

Lists reactions for an existing team discussion within an organization.

Lists reactions for a specific comment in a team discussion within an organization, optionally filtering by content type.

Lists assets (e.g., compiled binaries, source code archives) for a specific github release, identified by `release id` which must be valid for an existing release in the reposito…

Retrieves a list of all releases (published, draft, and prerelease) for a specified repository.

Lists repositories in an organization that a fine-grained personal access token (`pat request id`) has requested access to; must be performed by a github app.

Lists codespaces the authenticated user can access within a specified, existing repository.

Lists the `devcontainer.json` configurations available in a specified repository for use with github codespaces.

Lists all codespaces secrets available in a specific repository, without their encrypted values.

Lists repositories an app installation can access; 'total count' in response is zero if none are accessible.

Lists repositories accessible to the authenticated user through a specific github app installation (identified by `installation id`).

Lists public repositories for a specified github user, who must have an existing account.

Lists repositories for the authenticated user; using 'type' with 'visibility' or 'affiliation' api parameters (not in this model) can cause a 422 error.

Lists repositories a valid and existing github user has starred.

Lists repositories the authenticated user has starred, optionally sorted and paginated, including star creation timestamps via 'application/vnd.github.star+json' media type.

Lists repositories a given github user is watching; the username must be a valid and existing github user handle.

Lists repositories the authenticated user is watching (subscribed to for notifications).

Lists activities for a github repository, ensuring the repository exists and is accessible.

Lists collaborators for a specified repository, provided it exists and is accessible to the authenticated user.

Lists contributors to a specified repository, sorted by number of contributions in descending order; the repository must exist and be accessible.

Lists chronological events (e.g., code pushes, issue activities, pr actions, forks) for a specified, existing github repository.

Retrieves all pending (unaccepted or undeclined) collaboration invitations for a specified github repository.

Lists all pending repository invitations for the authenticated user.

Lists issues (which include pull requests) for a specified, existing github repository, with options for filtering, sorting, and pagination.

Lists the programming languages used in a github repository, returning a byte count for each language.

Retrieves notifications for the authenticated user from a specified repository, to which the user must have access.

Lists names of organization-level secrets shared with the specified repository; actual secret values are not returned and visibility depends on token access.

Lists organization variables accessible to a specific repository; the repository must exist.

Lists projects associated with a specific repository.

Lists rule suite evaluations for a repository, allowing filtering by ref (non-wildcard), time period, actor, and result.

Lists metadata for all secrets in a github repository, excluding their encrypted values.

Lists metadata (e.g., name, creation/update dates) for all dependabot secrets in a repository; secret values are not included.

Lists tags for a specified github repository.

Lists all teams with explicit permission to access the specified repository; the repository must exist.

Lists plain text key-value variables for github actions workflows within a specific, accessible repository.

Retrieves a list of webhooks for a repository, which must exist and be accessible.

Lists all github actions workflows for a specified repository, which must exist and be accessible.

Retrieves a paginated list of github actions cache usage statistics for repositories within an existing github organization.

Lists all review comments on all pull requests within a specified repository.

Lists all review comments on a specific pull request within a github repository.

Lists submitted reviews chronologically for a specific pull request within a github repository.

Lists downloadable github actions runner application binaries, used for setting up self-hosted runners, for an existing github organization.

Lists available self-hosted runner application binaries for a specific repository, including their os, architecture, and download url.

Lists all codespaces secrets accessible to the authenticated user for use within github codespaces.

Lists repositories within a specified organization that have been granted access to a particular dependabot secret.

Lists repositories within an organization that have explicit access to a specific organization secret, which must have its visibility set to 'selected'.

Lists repositories in an organization that can access a specific organization variable; supports pagination and returns an empty list if no repositories have been granted access.

Lists repositories that have access to the specified user secret for the authenticated user's codespaces, provided the user has codespaces access.

Lists self-hosted runners for a github organization, optionally filtering by name and paginating results, providing details for each runner such as os, status, and labels.

Lists all self-hosted runners configured for a repository.

Lists social media accounts publicly linked to an existing github user's profile.

Lists all social media accounts linked to the authenticated user's github profile.

Lists users who have starred the specified github repository, which must exist.

Retrieves a list of gists starred by the authenticated user.

Lists the authenticated user's active github marketplace subscriptions.

Lists the authenticated user's stubbed (test/example data, not live) github marketplace subscriptions, useful for development or testing.

Lists all active tag protection rules for a repository, defining patterns to prevent matching tags from being created or deleted; requires repository admin permissions.

Lists members of a specific team within an organization, including members of child teams.

Lists github projects accessible to a specific team within an organization.

Lists repositories accessible to a specific team within a github organization.

Lists teams for a specified github organization.

Lists all teams across all organizations to which the authenticated user belongs, supporting pagination.

Lists teams assigned to a specific role within a github organization.

Lists github users that a valid github `username` is following, supporting pagination.

Lists people the authenticated user follows.

Lists chronological events (e.g., comments, commits, label changes) for a specific issue in a github repository.

Lists repositories in an organization accessible by a specific fine-grained personal access token; this action is for github apps.

Retrieves a list of projects for a specified github user, optionally filtering by state and supporting pagination; the username must be a valid github handle.

Retrieves all github users (individuals and organizations) in chronological order of their sign-up date.

Lists users blocked by a specified github organization.

Lists users blocked by the authenticated user, returning an empty list if no users are blocked.

Lists users assigned to a specific role within a github organization.

Retrieves a list of users watching a specific repository; the repository must be accessible to the authenticated user.

Lists artifacts (e.g., build outputs, test results) for a specific workflow run in a github repository.

Lists workflow runs for a repository, allowing filtering by actor, branch, event, status, creation date, check suite id, or head sha; the repository must exist and be accessible.

Lists runs for a specified, existing workflow (identified by id or filename like `main.yml`) in a github repository, with filtering options.

Locks an existing github issue's conversation, preventing further comments; an optional reason can be specified.

Sets the codespaces access control policy for a github organization, determining which members can use them.

Creates or updates values for an organization's predefined custom properties across multiple repositories (up to 30).

Lists repositories within an organization that have been explicitly granted access to a specific organization secret.

Updates git author information (name and/or email) for an `author id` obtained during a repository import, to correctly attribute commits.

Marks the github notification thread (identified by `thread id`) as done or read for the authenticated user, effectively archiving it.

Marks an existing github notification thread, identified by its `thread id`, as read.

Marks notifications as read or unread, optionally for those updated at or before a `last read at` timestamp.

Marks notifications in a repository as read; if 'last read at' is specified, notifications updated after this timestamp are not marked as read.

Merges a head branch or commit sha into a base branch in a repository; fails if there are merge conflicts requiring manual resolution.

Merges an open and mergeable pull request in a repository, optionally specifying merge commit details, a merge method, and a required head sha for safety.

Moves a project card to a specified position, optionally into a new column.

Moves a column within a github project (classic) to a new position; `position` can be 'first', 'last', or 'after:<target column id>', where `target column id` must reference an e…

Sends a 'ping' event to a specified, existing organization webhook to test its configuration and ensure it correctly receives events.

Pings an existing webhook on a repository to test its configuration and reachability by github.

Privately reports a security vulnerability for a repository; specify either `severity` or `cvss vector string`, but not both.

Redelivers a specific webhook delivery for a webhook within an organization, to resend an event that previously failed or was not processed.

Redelivers a specific, previously made webhook delivery (`delivery id`) for a repository's webhook (`hook id`).

Deletes a custom property, specified by `custom property name`, from an existing organization (`org`) for which the property is currently defined, preventing its future assignmen…

Removes a label currently applied to a specific issue in a repository.

Removes all labels from a specified issue in a github repository; this operation is idempotent.

Revokes all organization roles for a team in an organization; this is destructive and succeeds even if the team initially has no roles.

Revokes all assigned organization-level roles from a specified user (who must be a member of the organization) within a github organization, without removing the user from the or…

Removes a user, who must currently be a member, from a github organization, revoking their membership and access rights.

Revokes an organization role that a team currently possesses within an organization.

Removes a custom organization role from a user within a github organization, provided the organization exists, the user is a member, and the role id corresponds to a valid custom…

Removes all github app access restrictions from a protected branch in a repository; the branch must have protection rules configured, and this action does not alter user or team …

Removes a project from a team within an organization; this action requires the project to be currently associated with the team.

Removes a collaborator from a specified github repository, provided the repository exists and the user is an existing collaborator.

Removes a repository from a github app installation for the authenticated user, given a valid `installation id` and the `repository id` of a repository currently linked to that i…

Disassociates a repository from a team; team members may lose access permissions, but the repository and team are not deleted.

Removes a selected repository's access to a user's codespaces secret; the secret must exist and the repository must have previously been granted access.

Removes specified assignees from a github issue; requires push access, and invalid removal attempts are silently ignored.

Removes a custom label from a repository's self-hosted runner; this operation is idempotent.

Removes a currently assigned custom label (`name`) from a self-hosted runner (`runner id`) in an organization (`org`).

Removes all custom labels from a self-hosted runner registered at the repository level, leaving only its default labels and any labels inherited from its runner group or organiza…

Removes all interaction restrictions from public repositories in the specified github organization, allowing all users to resume interactions.

Removes all interaction restrictions for a repository, enabling all users to comment, open issues, and create pull requests by lifting any existing temporary interaction limits.

Removes all interaction restrictions (limitations on comments, issues, or pull requests) from all public repositories owned by the authenticated user.

Deletes a github codespaces secret from an organization by its name; this operation is idempotent.

Permanently removes a specific dependabot secret, by its `secret name`, from the github `org`, making it unavailable to dependabot for that organization.

Removes a user, who must be an outside collaborator, from the specified github organization, revoking their access to all its repositories.

Makes an authenticated user's public membership in an organization private (without removing them from the organization); the user must currently be a public member of that organ…

Removes a repository's access to an organization-level codespaces secret, if it was previously granted.

Revokes a specific repository's access to an organization-level dependabot secret, applicable only when the secret has 'selected' visibility and the specified repository currentl…

Removes currently assigned user logins and/or team slugs from a github pull request's list of requested reviewers.

Removes a specific repository's access to an organization-level secret; the repository must have been previously granted access to this secret.

Removes a repository's access to an organization variable, if the variable's visibility is 'selected' and the repository is in its access list.

Removes specified status check contexts (passed in the request body as an array of strings) from a protected branch in a repository.

Removes status check protection from a branch, disabling required status checks for merging pull requests; will only have an effect if status check protection is currently config…

Removes all team-based access restrictions from a specified protected branch; the branch must be protected and have existing team restrictions for this action to change settings.

Removes a user from a specific team within an organization; this action fails if team synchronization with an identity provider (idp) is enabled, and may delete the team if the u…

Removes active user-level access restrictions from a specified protected branch, enabling users with repository write access to push or merge if no other team or app restrictions…

Removes a user as a collaborator from an organization project; the user must already be a collaborator on the specified project.

Removes selected users from github codespaces billing access for an existing organization.

Renames an existing branch in a github repository; the new name must be unique and adhere to github's naming conventions, and the current branch name cannot contain wildcard char…

Renders markdown to html; for 'gfm' mode, provide 'context' (owner/repo) to correctly link issues, pull requests, and user mentions.

Replaces all topics of a repository.

Sets an existing dependabot organization secret's visibility to 'selected' and replaces the full list of repositories that can access it with the ids provided.

Replaces the list of repositories that can access an existing organization-level codespaces secret with the provided valid repository ids owned by the organization.

Manually triggers a github pages build for a repository if github pages is enabled, useful for deployments not automatically built or for retrying failed builds.

Requests user and/or team reviewers for an open pull request in a repository; requires `owner`, `repo`, `pull number`, and at least one of `reviewers` or `team reviewers`.

Triggers a re-run of a specific check run in a github repository, which resets its status to 'queued', clears its conclusion, and triggers the `check run` webhook with `rerequest…

Triggers a new run of an existing check suite within a repository, useful for re-running checks without new code.

Re-runs a specific job and any dependent jobs from a github actions workflow run in the specified repository, optionally enabling debug logging.

Re-runs a specific github actions workflow run identified by its owner, repository, and run id, optionally enabling debug logging.

Re-runs all failed jobs and their dependent jobs from a specified workflow run if the run contains previously failed jobs.

Invalidates the provided oauth `access token` and generates a new one for the github oauth app identified by `client id`, used for token compromise or security rotation.

Restores a package in an organization, provided it was deleted within the last 30 days.

Restores a user-owned package previously deleted from github packages, if restorable under github's data retention policy (typically within 30 days of deletion).

Restores a package deleted by the authenticated user within the last 30 days, if its namespace and version are still available.

Restores a package version that was deleted by the authenticated user within the last 30 days.

Restores a package version for an organization, provided it was deleted within the last 30 days.

Restores a specific, user-owned package version if it was deleted within the last 30 days and its original namespace and version name are still available.

Gets a repository's public key, used to encrypt secrets for dependabot.

Approves or denies a pending fine-grained personal access token request for organization resources; must be performed by a github app.

Approves or rejects pending custom deployment protection rules for a workflow run by posting a review with `environment name` (str), `state` (str: 'approved'/'rejected'), and opt…

Approves or rejects pending deployments for a specific workflow run that are in a 'waiting' state within specified, configured environments.

Approves or denies fine-grained personal access token requests for an organization; any specified `pat request ids` must refer to currently pending requests.

Revokes the github app's current installation access token, immediately invalidating it for api authentication.

Searches code file contents and paths on the default branch of github repositories using a query string; searches only files under 384kb, returns max 1000 results by best match, …

Finds commits on github using a query string (q) supporting keywords and qualifiers, with options for sorting and pagination.

Searches github for issues and pull requests. use qualifiers to scope searches: `repo:owner/name` for specific repos, `org:orgname` for organizations, `user:username` for persona…

Searches for labels within a github repository by keywords in their names or descriptions.

Searches github repositories using a flexible query (keywords, qualifiers) with sorting, ordering, and pagination.

Finds topics on github using keywords and qualifiers with github's search syntax, supporting pagination.

Searches for users on github by criteria like username, email, location, followers, or repository associations, using a flexible query string `q`.

Enables administrator enforcement on a branch, making existing protection rules also apply to administrators; branch protection rules must already be configured.

Replaces the list of github apps permitted to push to a protected branch; the branch must already be protected and apps must be installed with 'contents' permission.

Sets the authenticated user's notification subscription for a repository.

Sets whether a github notification thread is ignored (muted) or unignored (unmuted), for a `thread id` that must identify an existing notification thread.

Updates an organization's default github token permissions for workflows and whether github actions can approve pull requests; note that allowing actions to approve pull requests…

Sets the default permissions for the github token within a repository and configures whether github actions can approve pull requests.

Sets the github actions permissions policy for an organization, specifying which repositories can run actions and which actions/workflows are allowed; if 'selected' is chosen for…

Sets github actions permissions for a repository, enabling/disabling actions and defining the policy for allowed actions and reusable workflows.

Limits interactions (comments, new issues, prs) in an organization's public repositories by user type and duration, typically to mitigate high traffic or unwanted activity.

Temporarily limits which github users (e.g., existing users, contributors only) can interact (comment, open issues, create pull requests) in a repository for a specified duration.

Sets or updates temporary interaction restrictions for all public repositories owned by the authenticated user, overriding any repository-specific limits.

Replaces all existing labels on a github issue with a new set of labels.

Sets the github actions permissions for an existing organization, specifying allowed github-owned actions, verified creator actions, and action/workflow patterns from public repo…

Sets the custom labels for a self-hosted runner in an organization; this operation does not affect default system-assigned labels (e.g., 'self-hosted', 'linux', 'x64').

Sets the visibility ('public' or 'private') of the authenticated user's primary email address on github, if one is configured.

Sets allowed github actions and reusable workflows for a repository, managing permissions for github-owned, verified creator, or specific pattern-matched actions/workflows (note:…

Replaces the list of repositories that can access an organization secret; only effective if the secret's visibility is 'selected'.

Replaces the list of repositories that can access an organization-level variable; the variable's visibility must be 'selected'.

Defines the list of repositories permitted to access a specific codespaces secret for the authenticated user.

Replaces required status check contexts for a protected branch, requiring admin permissions; an empty `contexts` array removes all checks.

Sets team push access for a protected branch by replacing all current teams with a new list of valid team slugs (provided in the request body); an empty list of slugs removes all…

Replaces the list of users with push access to a protected branch using a request body (not in this schema) containing an array of github usernames; this enables branch protectio…

Sets the access level for workflows outside a repository to use actions and reusable workflows within that repository.

Stars a github gist identified by `gist id`; this action is idempotent and returns a 204 no content status upon success, even if the gist is already starred.

Stars an existing and accessible repository for the authenticated user; this action is idempotent and succeeds even if the repository is already starred.

Initiates the startup process for an existing github codespace (identified by `codespace name`) if it's in a startable state like 'available' or 'stopped'.

Stops a codespace, which must be currently running, for a specified member of an organization.

Stops a running or available codespace for the authenticated user, pausing its execution and billing.

Finalizes a pending pull request review (identified by `review id`) with a required `event` (approve, request changes, comment) and an optional `body`.

Synchronizes a branch in a forked github repository with its upstream counterpart, assuming the repository is a fork, the branch exists, an upstream is configured, and the merge …

Triggers a simulated push event to test a repository's push webhook; a test event is only delivered if the webhook is subscribed to 'push' events, otherwise, it returns 204 no co…

Initiates a repository transfer to a new owner (who must accept the request); if the new owner is an organization, it must be configured to allow transfers.

Unblocks a github user, provided they are currently blocked by the authenticated user.

Unblocks a user from an organization, allowing renewed interaction with its resources, provided the user is currently blocked (otherwise, a 404 error may occur).

Unfollows an existing github user; this action is idempotent, succeeding even if the authenticated user is not currently following them.

Unlocks a currently locked github issue in the specified repository, allowing new comments and interactions.

Unlocks an organization repository previously locked by a github migration.

Unlocks a repository (`repo name`) that was locked as part of a user migration (`migration id`), making it usable or deletable; this action requires the repository to be currentl…

Removes a star from the specified gist; the action is idempotent and will not error if the gist was not previously starred by the user.

Removes the authenticated user's star from a specified repository, which must already be starred by the user.

Updates an existing check run for a specific commit in a repository, allowing modifications to its status, conclusion, output, and other details.

Updates a specific code scanning alert in a github repository, primarily to change its state (e.g., 'open' or 'dismissed').

Updates the default setup configuration for code scanning in a repository; github advanced security must be enabled for the repository.

Updates an existing github codespace's machine type, display name, or recent folders for the authenticated user; machine type changes take effect on the next start.

Changes the body of an existing commit comment.

Updates an existing custom role in an organization by modifying its name, description, or permissions; at least one of these fields must be provided.

Updates the name pattern of an existing deployment branch policy for a specific environment in a repository.

Updates the title and/or body of a specific team discussion within an organization.

Updates the body of a comment in a team's discussion within an organization.

Updates a gist's description, and/or its files (including content, filename changes, or deletion).

Updates an existing comment on a specified gist.

Updates an existing label's name, color, or description within a specified repository.

Updates a milestone in a repository, identified by `owner`, `repo`, and `milestone number`, by allowing modification of its `title`, `state`, `description`, or `due on`; at least…

Updates an existing environment variable's name and/or value in a specific github repository environment; requires providing either a new name or a new value.

Updates an existing project card's note and/or archived status, identified by its `card id`.

Updates the name of an existing column, identified by `column id`, in a github project (classic).

Updates an existing github issue's title, body, state, milestone, labels, or assignees; `state reason` is only processed if `state` also changes, and use `null` or `[]` to clear …

Updates an existing comment on an issue or pull request within a specified repository.

Updates an organization's settings; changing security-related fields requires admin, owner, or security manager permissions.

Updates an existing github actions organization variable's name, value, or visibility (`all`, `private`, `selected`), requiring `selected repository ids` with valid repository id…

Updates the configuration (url, content type, secret, ssl verification), subscribed events, active status, or name of an existing webhook for a specified organization.

Updates an existing github project's attributes if the github projects feature is enabled and at least one modifiable field is provided.

Updates an existing pull request, allowing changes to attributes like title, body, state, base branch, and maintainer modification settings.

Updates an open pull request's head branch by merging the latest changes from its base branch, if mergeable and repository merging is enabled; operates asynchronously.

Updates a git reference (e.g., a branch or tag) to a specific commit sha, creating the reference if it doesn't exist; use `force` for non-fast-forward updates.

Updates an existing release in a github repository, allowing modification of its attributes; if linking a discussion, the `discussion category name` must refer to an existing cat…

Updates the name, label, or state of a release asset in a github repository, requiring at least one of these properties to be provided for modification.

Updates settings for an existing github repository, such as name, description, visibility, merge strategies, and security configurations.

Updates an active repository invitation to modify the invited user's permissions; the specified repository and invitation must exist.

Updates an existing repository ruleset, identified by `ruleset id` for a given repository, allowing partial updates to its configuration such as name, target, enforcement, bypass…

Updates the name and/or value of an existing github actions variable in a repository.

Updates the url, content type, secret, ssl verification, events, or active status for an existing repository webhook, specified by `owner`, `repo`, and `hook id`.

Updates the body of an existing review comment on a pull request.

Updates the body text of an existing pull request review.

Updates a team's settings (e.g., name, description, privacy, parent team) within a github organization, identified by its slug and organization name.

Updates the configuration (url, content type, secret, ssl verification) for an existing webhook within a specified organization.

Updates the configuration (e.g., payload url, content type, secret, ssl verification) for an existing webhook in a specified repository.

Updates the protection settings for an existing branch in a repository, which must not contain wildcard characters.

Sets the git large file storage (lfs) preference for a repository, typically before initiating a source import.

Updates the configuration for a github pages site (e.g., custom domain, https, build type, source); requires github pages to be enabled for the repository, and if `build type` is…

Updates pull request review protection settings (e.g., required approvals, review dismissal, bypass allowances) for a branch; branch protection features must be available for the…

Updates repository preferences for automatic check suite creation on code pushes, allowing configuration for specific github apps that must be installed on the repository with `c…

Revokes organization access for the personal access tokens identified by `pat ids`; this action must be performed by a github app, and `pat ids` must be valid and associated with…

Updates required status checks for a branch, optionally requiring it to be up-to-date before merging.

Updates the authenticated user's github profile; a new public email must be verified, and existing private emails remain private even if specified.

Revokes a fine-grained personal access token's access to an organization, usable only by github apps when the token has existing access to that organization.

Uploads a gzipped and base64 encoded sarif file to a github repository for a specific commit and reference; use `checkout uri` if sarif paths are absolute.

Verifies if the authenticated user has accepted permissions for a specific devcontainer configuration in a repository, typically to ensure awareness before a codespace is created…