Railway GitHub App Permissions
judemolloy
HOBBYOP

24 days ago

Does Railway's GitHub App require the pull_request:write permission?

Security at my company are asking if it's needed and I can't figure out online if it is.

Thanks

Solved$10 Bounty

1 Replies

samgordon
PROTop 5% Contributor

24 days ago

I've attached the Railway GitHub permissions below. Yes, it does require that.

Attachments

image.png

Status changed to Solved samgordon • 24 days ago

samgordon
PROTop 5% Contributor

24 days ago

Attaching it here because the bridge is horrible

1437501134041387000

judemolloy
HOBBYOP

23 days ago

Thanks.

What is the specific need for the pull_request:write permission?

I.e. what does Railway use that permission to do?

Is it related to PR environments?

samgordon
PROTop 5% Contributor

23 days ago

Maybe… could also be to do with the integration with writing comments in it. 🤷

angelo-railway
EMPLOYEE

22 days ago

Hey Jude

It is indeed related to PR envs.

angelo-railway
EMPLOYEE

22 days ago

You can ask your company to onboard to https://trust.railway.com and they will get access to our whole security posture as well.

medim
MODERATOR

22 days ago

@angelo typo on domain

angelo-railway
EMPLOYEE

22 days ago

That wouldn't build trust, ty for catching the typo.

Loading...