🩹 [Patch]: Permission catalog now recognizes 12 additional GitHub App permissions#570
Merged
Marius Storhaug (MariusStorhaug) merged 2 commits intomainfrom Apr 1, 2026
Conversation
… and Get-GitHubGitignore
Copilot started reviewing on behalf of
Marius Storhaug (MariusStorhaug)
March 29, 2026 14:59
View session
Contributor
There was a problem hiding this comment.
Pull request overview
Expands the module’s GitHub App fine-grained permission catalog so Test-Permissions integration tests no longer fail when GitHub returns newly introduced permissions (Fixes #569).
Changes:
- Added 12 new fine-grained permission definitions (Repository/Organization/Enterprise) to the
GitHubPermissioncatalog. - Updated documentation URLs and access options (
readvsread/write) for the new permissions. - Includes minor whitespace-only formatting adjustments in two public functions.
Reviewed changes
Copilot reviewed 1 out of 3 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| src/classes/public/GitHubPermission.ps1 | Adds missing fine-grained permission entries to the central permission catalog used by permission validation/tests. |
| src/functions/public/Repositories/Repositories/Get-GitHubRepositoryFork.ps1 | Whitespace-only formatting change in request body construction. |
| src/functions/public/Gitignore/Get-GitHubGitignore.ps1 | Whitespace-only formatting change in parameter splat construction. |
src/functions/public/Repositories/Repositories/Get-GitHubRepositoryFork.ps1
Show resolved
Hide resolved
8d083e2
into
main
669 of 696 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The permission catalog used to map GitHub App fine-grained permissions now includes 12 additional permissions recently introduced by GitHub. Previously, any installation that had these permissions granted would cause
Test-Permissionsjobs to fail on all platforms because the catalog did not recognize them.Fixed: Permission tests no longer fail for newly added GitHub App permissions
The
Test-Permissionsintegration tests validate that every permission on an installation context exists in the module's permission catalog. GitHub added 12 new fine-grained permissions that were not in the catalog, causing test failures across Linux, macOS, and Windows.All 12 permissions are now defined in the catalog with correct scope, display name, description, and documentation URL (where available).
New Repository permission
artifact_metadataNew Organization permissions
custom_properties_for_organizationsorganization_copilot_metricsorganization_credentialsorganization_dependabot_dismissal_requestsorganization_runner_custom_imagesNew Enterprise permissions
enterprise_ai_controlsenterprise_copilot_metricsenterprise_credentialsenterprise_custom_enterprise_rolesenterprise_custom_properties_for_organizationsenterprise_teamsTechnical Details
NewPermissionList()static method inGitHubPermissionclass (src/classes/public/GitHubPermission.ps1)[GitHubPermission]::new()7-argument pattern and are inserted alphabetically within their scope sectionenterprise_copilot_metricsandorganization_copilot_metricsuse@('read')only (metrics are read-only); all others default to@('read', 'write')