Github App Contents permission

[CypagoTest]

Select Topic Area

Question

Body

Is it possible to get private branches and releases without the Contents permission?
Or maybe it is possible to restrict Contents permission to avoid "code permission" access?

[LuisContrerasGlz]

It's possible to restrict access to code in a private repository on GitHub by using branch and repository permissions. These allow you to control who has access to the code at the branch or repository level. To set permissions, go to the Settings tab in your repository and click on the Branches or Collaborators & teams tab. From there, you can add or remove users or teams and set their permissions.

[CypagoTest]

so, should i log in to install Github App with the user which do not have an access to code and it will help?

[LuisContrerasGlz]

Oh I get it, the permission is from their side, in this case you could try reach out to the person and ask for permission, if he or she configured to be private you should not be able to access it for what I know, hope this helps

[CypagoTest]

we are requesting the Contents permission as we need to collect private branches and releases, but as part of Contents permission we also get an access to code. now im trying to find a way how to restrict it. The way that you proposed before sounds good, but not perfect. Because it depends in the user and if user will have access to the code configured in Github, he will also be able to get this data with Github API. so, hope you get me and maybe here is another way.

[LuisContrerasGlz]

Oh I see, sorry about the confusion :-) hope my original response helps someway, I am new to replying in Github discussions haha

[CypagoTest]

Thx for help)

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬