Permissions - 1

2026 (3)

March (2)

github: Push protection exemptions for roles, teams, and apps

GitHub

2026-03-17

GitHub added push protection exemptions for secret scanning at the organization level. Specific roles, teams, and GitHub Apps can now be exempted, with exemption status checked on each push.

github: Code Quality permissions removed from security manager role

GitHub

2026-03-17

GitHub changed repository permissions for Code Quality: security managers can no longer enable or disable GitHub Code Quality unless they are also repository administrators. The ability to toggle Code Quality is now limited to repository admins.

January (1)

github: New fine-grained permission for artifact metadata is now generally available

GitHub

2026-01-13

GitHub released a new artifact_metadata permission (now generally available) to provide finer-grained API control over artifact-related metadata, replacing the broader contents:read and contents:write permissions for that metadata.

2025 (4)

December (1)

github: Block repository administrators from installing GitHub Apps on their own now generally available

GitHub

2025-12-01

GitHub rolled out a new organization-level setting (now generally available) that lets organization owners prevent repository administrators from installing GitHub Apps on repositories, giving owners tighter control over app installation and repository surface area.

November (2)

github: Block repository administrators from installing GitHub Apps on their own now in public preview

GitHub

2025-11-17

GitHub added a new organization-level setting (now in public preview) that lets organization owners restrict which users can install GitHub Apps for repositories. This blocks repository administrators from installing GitHub Apps on their own, giving owners tighter control over app installation and repository security.

github: Fine-grain permissions for Copilot usage metrics now available

GitHub

2025-11-17

GitHub added a fine-grain enterprise role—"View enterprise Copilot metrics"—that grants access to the Copilot Usage Metrics APIs and the Copilot Usage Dashboard so assigned users can view enterprise-level Copilot usage data.

September (1)

github: Share read-only Sparks with controlled data access

GitHub

2025-09-17

GitHub now lets you publish Sparks as read-only so you can control how others interact with your apps and data. When publishing a Spark you can choose between granting write access or restricting it to read-only, enabling safer sharing and finer-grained data access control.