curl -X POST 'https://api.github.com/enterprises/example-enterprise/code-security/configurations/10/attach' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "scope": "all"
}'

# POST /enterprises/{enterprise}/code-security/configurations/{configuration_id}/attach (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub token; required.
Request formats: application/json.
Last verified: 2026-10-20

> Attach an enterprise configuration to repositories

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X POST 'https://api.github.com/enterprises/example-enterprise/code-security/configurations/10/attach' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{
  "scope": "all"
}'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| enterprise | path | string | Yes | The slug version of the enterprise name. |
| configuration_id | path | integer | Yes | The unique identifier of the code security configuration. |
| scope | body | string | Yes | The type of repositories to attach the configuration to. |

## Response example
{}

---
Need an API key? Get one at https://github.com/settings/tokens

POST

POST /enterprises/{enterprise}/code-security/configurations/{configuration_id}/attach — GitHub API

GitHub token (required); https://api.github.com

GitHub API

Attach an enterprise configuration to repositories

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-10-20 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 228 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X POST 'https://api.github.com/enterprises/example-enterprise/code-security/configurations/10/attach' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10' \  -H 'Content-Type: application/json' \  -d '{  "scope": "all"}'

Parameters

Name	In	Type	Required	Description
enterprise	path	string	Yes	The slug version of the enterprise name.
configuration_id	path	integer	Yes	The unique identifier of the code security configuration.
scope	body	string	Yes	The type of repositories to attach the configuration to.

Response 200 OK

{}

Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.