Skip to content

[TEC-554] Document GitHub permissions required by code autofix#2663

Open
abhijna wants to merge 3 commits into
mainfrom
abhijna/autofix-github-perm
Open

[TEC-554] Document GitHub permissions required by code autofix#2663
abhijna wants to merge 3 commits into
mainfrom
abhijna/autofix-github-perm

Conversation

@abhijna

@abhijna abhijna commented Jun 8, 2026

Copy link
Copy Markdown
Collaborator

Preview

To do:

  • Break up appendix (in different PR)

Reviews:

  • A subject matter expert reviews the content
  • A technical writer reviews the PR
  • Check the Mintlify bot preview link on this PR (requires PR to main)

@abhijna abhijna self-assigned this Jun 8, 2026
@mintlify

mintlify Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
semgrep-docs 🟢 Ready View Preview Jun 8, 2026, 6:11 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.

@squaresurf squaresurf left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks correct to me. Thank you @abhijna.

@zyannes do you mind looking at this from the perspective that we will be using the scm-drivers soon?


### How repository contents are accessed

Semgrep does **not** read or write file contents through the REST Contents API (`GET` or `PUT` `/repos/{owner}/{repo}/contents/{path}`). Autofix reads and writes code only through the **Git transport layer** (clone and push), which still requires the GitHub **Contents** permissions above.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note: this is true as of today, but I am currently working on changing this to use the API. The new approach will be behind a feature flag.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants