From 1c0c3eaced7e0f0c8d3c584ab5b6815f3b3a7887 Mon Sep 17 00:00:00 2001 From: Ashwin Bhat Date: Wed, 15 Oct 2025 10:12:11 -0700 Subject: [PATCH] docs: document GitHub App permissions in security guide (#607) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Clarifies which permissions are currently used (Contents, Pull Requests, Issues) versus those requested for planned future features (Discussions, Actions, Checks, Workflows). 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude --- docs/security.md | 19 +++++++++++++++---- 1 file changed, 15 insertions(+), 4 deletions(-) diff --git a/docs/security.md b/docs/security.md index 23444f5..fe71889 100644 --- a/docs/security.md +++ b/docs/security.md @@ -19,11 +19,22 @@ ## GitHub App Permissions -The [Claude Code GitHub app](https://github.com/apps/claude) requires these permissions: +The [Claude Code GitHub app](https://github.com/apps/claude) requests the following permissions: -- **Pull Requests**: Read and write to create PRs and push changes -- **Issues**: Read and write to respond to issues -- **Contents**: Read and write to modify repository files +### Currently Used Permissions + +- **Contents** (Read & Write): For reading repository files and creating branches +- **Pull Requests** (Read & Write): For reading PR data and creating/updating pull requests +- **Issues** (Read & Write): For reading issue data and updating issue comments + +### Permissions for Future Features + +The following permissions are requested but not yet actively used. These will enable planned features in future releases: + +- **Discussions** (Read & Write): For interaction with GitHub Discussions +- **Actions** (Read): For accessing workflow run data and logs +- **Checks** (Read): For reading check run results +- **Workflows** (Read & Write): For triggering and managing GitHub Actions workflows ## Commit Signing