ghtier
← All scopes
Classic scope·part of repo

security_events

Tier 1 · HighData

Why Tier 1

Tier 1 because it reaches Secret scanning alerts: Read (repository).

GitHub: Grants: read and write access to security events in the code scanning API read and write access to security events in the secret scanning API This scope is only necessary to grant other users or services access to security events *without* granting access to the code.

Available on: Every setup. Source

Permissions it reaches (19)

TierPermissionEvidence
T1sets tierSecret scanning alerts: Readrepository12 documented endpoints
  • DELETE /repos/{owner}/{repo}/bypass-responses/secret-scanning/{bypass_response_id}
  • GET /orgs/{org}/bypass-requests/secret-scanning
  • GET /orgs/{org}/secret-scanning/alerts
T2Organization dismissal requests for code scanning: Writeorganization1 documented endpoint
  • PATCH /repos/{owner}/{repo}/dismissal-requests/code-scanning/{alert_number}
T2Organization dismissal requests for Dependabot: Writeorganization2 documented endpoints
  • DELETE /repos/{owner}/{repo}/dismissal-requests/dependabot/{alert_number}
  • PATCH /repos/{owner}/{repo}/dismissal-requests/dependabot/{alert_number}
T2Organization bypass requests for secret scanning: Writeorganization1 documented endpoint
  • PATCH /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}
T2Secret scanning alert dismissal requests: Writerepository1 documented endpoint
  • PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}
T2Secret scanning alerts: Writerepository1 documented endpoint
  • PATCH /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}
T2Secret scanning push protection bypass requests: Writerepository1 documented endpoint
  • PATCH /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}
T2Secret scanning alert dismissal requests: Writeorganization1 documented endpoint
  • PATCH /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}
T2Code scanning alerts: Writerepository3 documented endpoints
  • PATCH /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}
  • POST /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix
  • POST /repos/{owner}/{repo}/code-scanning/sarifs
T2Dependabot alerts: Writerepository1 documented endpoint
  • PATCH /repos/{owner}/{repo}/dependabot/alerts/{alert_number}
T3Contents: Readrepository4 documented endpoints
  • GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}
  • GET /repos/{owner}/{repo}/code-scanning/codeql/variant-analyses/{codeql_variant_analysis_id}/repos/{repo_owner}/{repo_name}
  • GET /repos/{owner}/{repo}/dismissal-requests/secret-scanning/{alert_number}
T3Campaigns: Readorganization2 documented endpoints
  • GET /orgs/{org}/campaigns
  • GET /orgs/{org}/campaigns/{campaign_number}
T3Campaigns: Writeorganization3 documented endpoints
  • DELETE /orgs/{org}/campaigns/{campaign_number}
  • PATCH /orgs/{org}/campaigns/{campaign_number}
  • POST /orgs/{org}/campaigns
T3Organization dismissal requests for code scanning: Readorganization3 documented endpoints
  • GET /orgs/{org}/dismissal-requests/code-scanning
  • GET /repos/{owner}/{repo}/dismissal-requests/code-scanning
  • GET /repos/{owner}/{repo}/dismissal-requests/code-scanning/{alert_number}
T3Organization dismissal requests for Dependabot: Readorganization1 documented endpoint
  • GET /orgs/{org}/dismissal-requests/dependabot
T3Organization bypass requests for secret scanning: Readorganization3 documented endpoints
  • GET /orgs/{org}/bypass-requests/secret-scanning
  • GET /repos/{owner}/{repo}/bypass-requests/secret-scanning
  • GET /repos/{owner}/{repo}/bypass-requests/secret-scanning/{bypass_request_number}
T3Secret scanning push protection bypass requests: Readrepository1 documented endpoint
  • GET /repos/{owner}/{repo}/bypass-requests/secret-scanning
T3Code scanning alerts: Readrepository11 documented endpoints
  • GET /repos/{owner}/{repo}/code-scanning/ai-scan
  • GET /repos/{owner}/{repo}/code-scanning/alerts
  • GET /repos/{owner}/{repo}/code-scanning/alerts/{alert_number}
T3Dependabot alerts: Readrepository8 documented endpoints
  • DELETE /repos/{owner}/{repo}/dismissal-requests/dependabot/{alert_number}
  • GET /orgs/{org}/dependabot/alerts
  • GET /repos/{owner}/{repo}/dependabot/alerts