Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Original file line number Diff line number Diff line change
Expand Up @@ -61,6 +61,21 @@ This will prevent people on your network from accessing these endpoints with use

>[!NOTE] Access to `github.com/login` is required to create support tickets. To ensure users with support entitlements can request help, you may want to exempt these users from the restriction.

## Enabling access restrictions for multiple enterprises

Enterprise owners can enforce the restriction across multiple enterprise accounts.

1. Enable the feature for each enterprise account. See [Enabling access restrictions](#enabling-access-restrictions).
1. Inject a header into all traffic going to certain supported endpoints. The header is in the following format.

```text
sec-GitHub-allowed-enterprise: ENTERPRISE1-ID, ENTERPRISE2-ID, ENTERPRISE3-ID ... ENTERPRISE20-ID.
```

Enterprise owners can find the correct enterprise ID to use in the header for each of the enterprises. See [Finding the header](#finding-the-header).

> [!NOTE] We currently support up to 20 unique enterprise IDs to be included in the header.

### Lifting the restriction for certain users

You may want to lift the restriction for certain users who need to contribute to open source resources using a personal account, or who may need to create support tickets in case of issues. To handle this, you must configure your network to inject the header only for users that you intend to restrict.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -828,6 +828,60 @@
"additional-permissions": false,
"access": "read"
},
{
"category": "orgs",
"slug": "get-immutable-releases-settings-for-an-organization",
"subcategory": "orgs",
"verb": "get",
"requestPath": "/orgs/{org}/settings/immutable-releases",
"additional-permissions": false,
"access": "read"
},
{
"category": "orgs",
"slug": "set-immutable-releases-settings-for-an-organization",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases",
"additional-permissions": false,
"access": "write"
},
{
"category": "orgs",
"slug": "list-selected-repositories-for-immutable-releases-enforcement",
"subcategory": "orgs",
"verb": "get",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories",
"additional-permissions": false,
"access": "read"
},
{
"category": "orgs",
"slug": "set-selected-repositories-for-immutable-releases-enforcement",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories",
"additional-permissions": true,
"access": "write"
},
{
"category": "orgs",
"slug": "enable-a-selected-repository-for-immutable-releases-in-an-organization",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}",
"additional-permissions": true,
"access": "write"
},
{
"category": "orgs",
"slug": "disable-a-selected-repository-for-immutable-releases-in-an-organization",
"subcategory": "orgs",
"verb": "delete",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}",
"additional-permissions": true,
"access": "write"
},
{
"category": "copilot",
"slug": "get-copilot-metrics-for-a-team",
Expand Down Expand Up @@ -4326,6 +4380,33 @@
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "check-if-immutable-releases-are-enabled-for-a-repository",
"subcategory": "repos",
"verb": "get",
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
"additional-permissions": false,
"access": "read"
},
{
"category": "repos",
"slug": "enable-immutable-releases",
"subcategory": "repos",
"verb": "put",
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
"additional-permissions": false,
"access": "write"
},
{
"category": "repos",
"slug": "disable-immutable-releases",
"subcategory": "repos",
"verb": "delete",
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
"additional-permissions": false,
"access": "write"
},
{
"category": "interactions",
"slug": "get-interaction-restrictions-for-a-repository",
Expand Down
54 changes: 54 additions & 0 deletions src/github-apps/data/fpt-2022-11-28/fine-grained-pat.json
Original file line number Diff line number Diff line change
Expand Up @@ -3498,6 +3498,42 @@
"verb": "delete",
"requestPath": "/orgs/{org}/security-managers/teams/{team_slug}"
},
{
"slug": "get-immutable-releases-settings-for-an-organization",
"subcategory": "orgs",
"verb": "get",
"requestPath": "/orgs/{org}/settings/immutable-releases"
},
{
"slug": "set-immutable-releases-settings-for-an-organization",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases"
},
{
"slug": "list-selected-repositories-for-immutable-releases-enforcement",
"subcategory": "orgs",
"verb": "get",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories"
},
{
"slug": "set-selected-repositories-for-immutable-releases-enforcement",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories"
},
{
"slug": "enable-a-selected-repository-for-immutable-releases-in-an-organization",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}"
},
{
"slug": "disable-a-selected-repository-for-immutable-releases-in-an-organization",
"subcategory": "orgs",
"verb": "delete",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}"
},
{
"slug": "list-hosted-compute-network-configurations-for-an-organization",
"subcategory": "network-configurations",
Expand Down Expand Up @@ -4396,6 +4432,24 @@
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/hooks/{hook_id}/tests"
},
{
"slug": "check-if-immutable-releases-are-enabled-for-a-repository",
"subcategory": "repos",
"verb": "get",
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
},
{
"slug": "enable-immutable-releases",
"subcategory": "repos",
"verb": "put",
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
},
{
"slug": "disable-immutable-releases",
"subcategory": "repos",
"verb": "delete",
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
},
{
"slug": "list-repository-languages",
"subcategory": "repos",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -1010,6 +1010,72 @@
"server-to-server": true,
"additional-permissions": false
},
{
"category": "orgs",
"slug": "get-immutable-releases-settings-for-an-organization",
"subcategory": "orgs",
"verb": "get",
"requestPath": "/orgs/{org}/settings/immutable-releases",
"access": "read",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": false
},
{
"category": "orgs",
"slug": "set-immutable-releases-settings-for-an-organization",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": false
},
{
"category": "orgs",
"slug": "list-selected-repositories-for-immutable-releases-enforcement",
"subcategory": "orgs",
"verb": "get",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories",
"access": "read",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": false
},
{
"category": "orgs",
"slug": "set-selected-repositories-for-immutable-releases-enforcement",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "orgs",
"slug": "enable-a-selected-repository-for-immutable-releases-in-an-organization",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "orgs",
"slug": "disable-a-selected-repository-for-immutable-releases-in-an-organization",
"subcategory": "orgs",
"verb": "delete",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "copilot",
"slug": "get-copilot-metrics-for-a-team",
Expand Down Expand Up @@ -5356,6 +5422,39 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "check-if-immutable-releases-are-enabled-for-a-repository",
"subcategory": "repos",
"verb": "get",
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
"access": "read",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": false
},
{
"category": "repos",
"slug": "enable-immutable-releases",
"subcategory": "repos",
"verb": "put",
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": false
},
{
"category": "repos",
"slug": "disable-immutable-releases",
"subcategory": "repos",
"verb": "delete",
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": false
},
{
"category": "interactions",
"slug": "get-interaction-restrictions-for-a-repository",
Expand Down
54 changes: 54 additions & 0 deletions src/github-apps/data/fpt-2022-11-28/server-to-server-rest.json
Original file line number Diff line number Diff line change
Expand Up @@ -3434,6 +3434,42 @@
"verb": "delete",
"requestPath": "/orgs/{org}/security-managers/teams/{team_slug}"
},
{
"slug": "get-immutable-releases-settings-for-an-organization",
"subcategory": "orgs",
"verb": "get",
"requestPath": "/orgs/{org}/settings/immutable-releases"
},
{
"slug": "set-immutable-releases-settings-for-an-organization",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases"
},
{
"slug": "list-selected-repositories-for-immutable-releases-enforcement",
"subcategory": "orgs",
"verb": "get",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories"
},
{
"slug": "set-selected-repositories-for-immutable-releases-enforcement",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories"
},
{
"slug": "enable-a-selected-repository-for-immutable-releases-in-an-organization",
"subcategory": "orgs",
"verb": "put",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}"
},
{
"slug": "disable-a-selected-repository-for-immutable-releases-in-an-organization",
"subcategory": "orgs",
"verb": "delete",
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}"
},
{
"slug": "list-hosted-compute-network-configurations-for-an-organization",
"subcategory": "network-configurations",
Expand Down Expand Up @@ -4522,6 +4558,24 @@
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/hooks/{hook_id}/tests"
},
{
"slug": "check-if-immutable-releases-are-enabled-for-a-repository",
"subcategory": "repos",
"verb": "get",
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
},
{
"slug": "enable-immutable-releases",
"subcategory": "repos",
"verb": "put",
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
},
{
"slug": "disable-immutable-releases",
"subcategory": "repos",
"verb": "delete",
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
},
{
"slug": "list-repository-languages",
"subcategory": "repos",
Expand Down
Loading
Loading