Railway GitHub App Permissions

judemolloy

HOBBYOP

4 months ago

Does Railway's GitHub App require the pull_request:write permission?

Security at my company are asking if it's needed and I can't figure out online if it is.

Thanks

Solved$10 Bounty

Pinned Solution

samgordon

PRO

4 months ago

I've attached the Railway GitHub permissions below. Yes, it does require that.

Attachments

image.png

8 Replies

samgordon

PRO

4 months ago

I've attached the Railway GitHub permissions below. Yes, it does require that.

Attachments

image.png

Status changed to Solved samgordon • 4 months ago

samgordon

PRO

4 months ago

Attaching it here because the bridge is horrible

1437501134041387000

judemolloy

HOBBYOP

4 months ago

Thanks.

What is the specific need for the pull_request:write permission?

I.e. what does Railway use that permission to do?

Is it related to PR environments?

samgordon

PRO

4 months ago

Maybe… could also be to do with the integration with writing comments in it. 🤷

angelo-railway

EMPLOYEE

4 months ago

Hey Jude

It is indeed related to PR envs.

angelo-railway

EMPLOYEE

4 months ago

You can ask your company to onboard to https://trust.railway.com and they will get access to our whole security posture as well.

medim

MODERATOR

4 months ago

@angelo typo on domain

angelo-railway

EMPLOYEE

4 months ago

That wouldn't build trust, ty for catching the typo.