Repository role·One repository

Triage

Tier 2 · MediumData

Why Tier 2

Tier 2 because it includes Discussions: Write (repository), Issues: Write (repository), Pull requests: Write (repository).

Manage issues, pull requests and discussions without write access to code.

Available on: Every setup. Source

Tier	Permission	From
T2sets tier	Discussions: Writerepository	Hide anyone's comments on discussions Move a discussion to a different category Lock and unlock discussions and 3 more inferred
T2sets tier	Issues: Writerepository	Open issues Close issues they opened themselves Reopen issues they closed themselves and 4 more documented
T2sets tier	Pull requests: Writerepository	Send pull requests from forks of the team's assigned repositories Submit reviews on pull requests Apply/dismiss labels and 2 more documented
T3	Actions: Readrepository	View GitHub Actions workflow runs documented
T3	Administration: Readrepository	View rulesets for a repository documented
T3	Codespaces: Writerepository In part, counts as T3 (the full permission is T2): A codespace with the person's own access and no repository secrets.	Create codespaces for private repositories Create codespaces for public repositories inferred
T3	Contents: Readrepository	Pull from the person or team's assigned repositories Fork the person or team's assigned repositories View published releases documented
T3	Packages: Readrepository	View and install packages documented
T3	Code scanning alerts: Readrepository	View code scanning alerts on pull requests documented

Get an agent to copy private code into public Read or expose private code · through Issues: Write, Contents: Read
Approve your own PR from a second account Submit malicious code · through Pull requests: Write
Have a workflow approve the PR Submit malicious code · through Pull requests: Write
Push more commits after approval Submit malicious code · through Pull requests: Write
Approve someone else's PR, then push to it Submit malicious code · through Pull requests: Write
Use a trusted colleague's account Submit malicious code · through Pull requests: Write
Trick or outlast the reviewer Submit malicious code · through Pull requests: Write
Clone private repos with a stolen token Read or expose private code · through Contents: Read

These do not affect the tier.

Edit and delete their own comments (Only the person's own comments.)
Have an issue assigned to them (Being assigned grants nothing.)
Edit wikis in public repositories (Wikis have no API permission. Wiki edits do not change code or settings.)
Report abusive or spammy content (Moderation report only.)