PUT

Try PUT /orgs/{org}/actions/permissions/selected-actions — GitHub API

GitHub playground

Set allowed actions and reusable workflows for an organization

Credentials

GitHub token · sent as Authorization

Kept in this tab only. Requests go through apicheats.dev's same-origin proxy straight to api.github.com; the proxy stores and logs nothing about them.

Headers

Accept · fixedX-GitHub-Api-Version · fixed

Path

org · required · string The organization name. The name is not case sensitive.

Body application/json

3 body fields

github_owned_allowed · optional · boolean — Whether GitHub-owned actions are allowed. For example, this includes the actions in the `actions` organization.
verified_allowed · optional · boolean — Whether actions from GitHub Marketplace verified creators are allowed. Set to `true` to allow all actions by GitHub Marketplace verified creators.
patterns_allowed · optional · string[] — Specifies a list of string-matching patterns to allow specific action(s) and reusable workflow(s). Wildcards, tags, and SHAs are allowed. For example, `monalisa/octocat@*`, `monalisa/octocat@v2`, `monalisa/*`. > [!NOTE] > The `patterns_allowed` setting only applies to public repositories.