repository_creation permission: the app doesn't get access to the repository it creates
#210736
Replies: 2 comments
|
Thank you for your interest in contributing to our community! We currently only accept discussions created through the GitHub UI using our provided discussion templates. Please re-submit your discussion by navigating to the appropriate category and using the template provided. This discussion has been closed because it was not submitted through the expected format. If you believe this was a mistake, please reach out to the maintainers. |
0 replies
|
This has been fixed, thank you for the report. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Since the 2026-10-13 changelog, a GitHub App can create repositories with
repository_creation: write, withoutadministration: write. The changelog says: "When the repository is created, the app or user that created it will be given access to it." In my tests, it isn't.Setup: an org on the Free plan; a private, org-owned GitHub App with
contents: write,metadata: readandrepository_creation: write; installed on "Only select repositories" (two repositories).Steps:
POST /orgs/{org}/reposwith{"name": "...", "private": true, "auto_init": true}returns201, and the repository is created.GET /installation/repositoriesdoesn't list the new repository.PUT /repos/{org}/{new}/contents/file.txtreturns404.POST /repos/{org}/{template}/generatereturns422 "Could not clone: Cloning user does not have permission to view the clone repository", though the template is among the selected repositories. The new repository is created empty.Control: the same with an app that has
administration: writeinstead ofrepository_creation: write, also on selected repositories. The new repository appears inGET /installation/repositorieswithin seconds, and the app writes to it (201).Expected: with
repository_creation: write, the app reaches the repository it created, as it does withadministration: write, so it can use it without an org owner adding it by hand.Question: is this a bug, or is the access given some other way (another endpoint, header or API version)?
Tested on 2026-10-20.
All reactions