ghtier
← All permissions
Repository permission·pages:read

Pages: Read

Tier 3 · Low

Why Tier 3

Reads the GitHub Pages configuration.

Data plane permissions start at Tier 2. This one is lowered for the reason above.

Target
Repository
Plane
DataWorkflows: Workflow files and runs, variables, deployments, environments and Pages.
Granted by
Fine-grained PAT, GitHub App, GITHUB_TOKEN
Available on
Every setup
In a workflow
permissions: pages: read

What it unlocks

5 REST endpoints need this permission. A few of them:

  • GET /repos/{owner}/{repo}/pages
  • GET /repos/{owner}/{repo}/pages/builds
  • GET /repos/{owner}/{repo}/pages/builds/latest
  • GET /repos/{owner}/{repo}/pages/builds/{build_id}

Roles that include it

No built-in role includes it. Only tokens, Apps or custom roles can grant it.

Classic scopes that reach it

Attack paths

No attack technique, escalation or incident on ghtier goes through this yet.

Other levels

GitHub Docs: Repository permissions for "Pages"