ghtier
← All scopes
Classic scope

codespace

Tier 2 · MediumData

Why Tier 2

Tier 2 because it reaches Codespaces: Write (repository), Codespaces user secrets: Write (user), Codespaces lifecycle admin: Write (repository).

GitHub: Grants the ability to create and manage codespaces. Codespaces can expose a GITHUB_TOKEN which may have a different set of scopes. For more information, see Security in GitHub Codespaces.

Available on: Free, Team, Enterprise Cloud, EMU. Source

Permissions it reaches (7)

TierPermissionEvidence
T2sets tierCodespaces lifecycle admin: Writerepository3 documented endpoints
  • POST /user/codespaces/{codespace_name}/exports
  • POST /user/codespaces/{codespace_name}/start
  • POST /user/codespaces/{codespace_name}/stop
T2sets tierCodespaces user secrets: Writeuser5 documented endpoints
  • DELETE /user/codespaces/secrets/{secret_name}
  • DELETE /user/codespaces/secrets/{secret_name}/repositories/{repository_id}
  • PUT /user/codespaces/secrets/{secret_name}
T2sets tierCodespaces: Writerepository8 documented endpoints
  • DELETE /user/codespaces/{codespace_name}
  • GET /repos/{owner}/{repo}/codespaces/new
  • GET /repos/{owner}/{repo}/codespaces/permissions_check
T3Codespaces lifecycle admin: Readrepository1 documented endpoint
  • GET /user/codespaces/{codespace_name}/exports/{export_id}
T3Codespaces metadata: Readrepository3 documented endpoints
  • GET /repos/{owner}/{repo}/codespaces/devcontainers
  • GET /repos/{owner}/{repo}/codespaces/machines
  • GET /user/codespaces/{codespace_name}/machines
T3Codespaces user secrets: Readuser4 documented endpoints
  • GET /user/codespaces/secrets
  • GET /user/codespaces/secrets/public-key
  • GET /user/codespaces/secrets/{secret_name}
T3Codespaces: Readrepository3 documented endpoints
  • GET /repos/{owner}/{repo}/codespaces
  • GET /user/codespaces
  • GET /user/codespaces/{codespace_name}