curl -X PUT 'https://api.github.com/orgs/example-org/actions/permissions/fork-pr-workflows-private-repos' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "run_workflows_from_fork_pull_requests": true
}'

# PUT /orgs/{org}/actions/permissions/fork-pr-workflows-private-repos (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub token; required.
Request formats: application/json.
Last verified: 2026-10-20

> Set private repo fork PR workflow settings for an organization

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X PUT 'https://api.github.com/orgs/example-org/actions/permissions/fork-pr-workflows-private-repos' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "run_workflows_from_fork_pull_requests": true
}'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| org | path | string | Yes | The organization name. The name is not case sensitive. |
| run_workflows_from_fork_pull_requests | body | boolean | Yes | Whether workflows triggered by pull requests from forks are allowed to run on... |
| send_write_tokens_to_workflows | body | boolean | No | Whether GitHub Actions can create pull requests or submit approving pull requ... |
| send_secrets_and_variables | body | boolean | No | Whether to make secrets and variables available to workflows triggered by pul... |
| require_approval_for_fork_pr_workflows | body | boolean | No | Whether workflows triggered by pull requests from forks require approval from... |

## Response example
null

---
Need an API key? Get one at https://github.com/settings/tokens

PUT

PUT /orgs/{org}/actions/permissions/fork-pr-workflows-private-repos — GitHub API

GitHub token (required); https://api.github.com

GitHub API

Set private repo fork PR workflow settings for an organization

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-10-20 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 302 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X PUT 'https://api.github.com/orgs/example-org/actions/permissions/fork-pr-workflows-private-repos' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10' \  -H 'Content-Type: application/json' \  -d '{  "run_workflows_from_fork_pull_requests": true}'

Parameters

Name	In	Type	Required	Description
org	path	string	Yes	The organization name. The name is not case sensitive.
run_workflows_from_fork_pull_requests	body	boolean	Yes	Whether workflows triggered by pull requests from forks are allowed to run on private repositories.
send_write_tokens_to_workflows	body	boolean	No	Whether GitHub Actions can create pull requests or submit approving pull request reviews from a workflow triggered by a fork pull request.
send_secrets_and_variables	body	boolean	No	Whether to make secrets and variables available to workflows triggered by pull requests from forks.
require_approval_for_fork_pr_workflows	body	boolean	No	Whether workflows triggered by pull requests from forks require approval from a repository administrator to run.

Response 200 OK

null

Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.