curl -X POST 'https://api.github.com/orgs/example-org/dependency_graph/enable_all' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{}'

# POST /orgs/{org}/{security_product}/{enablement} (GitHub API)
Base URL: https://api.github.com
Auth: Authorization; GitHub token; required.
Status: Deprecated.
Request formats: application/json.
Last verified: 2026-10-20

> Enable or disable a security feature for an organization

## Critical Gotchas
* GitHub recommends an `Accept: application/vnd.github+json` header and an explicit `X-GitHub-Api-Version` header.
* Fine-grained tokens only authorize repositories and permissions selected when the token is created.

## cURL
curl -X POST 'https://api.github.com/orgs/example-org/dependency_graph/enable_all' \
  -H "Authorization: Bearer $GITHUB_TOKEN" \
  -H 'Accept: application/vnd.github+json' \
  -H 'X-GitHub-Api-Version: 2026-03-10' \
  -H 'Content-Type: application/json' \
  -d '{}'

## Parameters
| Name | In | Type | Required | Description |
| :--- | :--- | :--- | :--- | :--- |
| org | path | string | Yes | The organization name. The name is not case sensitive. |
| security_product | path | string | Yes | The security feature to enable or disable. |
| enablement | path | string | Yes | The action to take.  `enable_all` means to enable the specified security feat... |
| query_suite | body | string | No | CodeQL query suite to be used. If you specify the `query_suite` parameter, th... |

## Response example
null

---
Need an API key? Get one at https://github.com/settings/tokens

POST

POST /orgs/{org}/{security_product}/{enablement} — GitHub API

Deprecated

GitHub token (required); https://api.github.com

GitHub API

Enable or disable a security feature for an organization

Base URL: https://api.github.com
Auth: Authorization: Bearer <GITHUB_API_KEY>
Last verified: 2026-10-20 · upstream hash matched

Actions Try in browser→

Agents: curl -H "Accept: text/markdown" this URL
→ 266 tokens · Vary: Accept

Critical gotchas

GitHub recommends an Accept: application/vnd.github+json header and an explicit X-GitHub-Api-Version header.

Fine-grained tokens only authorize repositories and permissions selected when the token is created.

cURL

curl -X POST 'https://api.github.com/orgs/example-org/dependency_graph/enable_all' \  -H "Authorization: Bearer $GITHUB_TOKEN" \  -H 'Accept: application/vnd.github+json' \  -H 'X-GitHub-Api-Version: 2026-03-10' \  -H 'Content-Type: application/json' \  -d '{}'

Parameters

Name	In	Type	Required	Description
org	path	string	Yes	The organization name. The name is not case sensitive.
security_product	path	string	Yes	The security feature to enable or disable.
enablement	path	string	Yes	The action to take. `enable_all` means to enable the specified security feature for all repositories in the organization. `disable_all` means to disable the specified security feature for all repositories in the organization.
query_suite	body	string	No	CodeQL query suite to be used. If you specify the `query_suite` parameter, the default setup will be configured with this query suite only on all repositories that didn't have default setup already configured. It will not change the query suite on repositories that already have default setup configured. If you don't specify any `query_suite` in your request, the preferred query suite of the organization will be applied.

Response 200 OK

null

Get a free GitHub API key → sponsored

Affiliate link - we may earn a commission, at no extra cost to you.