Distillation

Date: Aug 27, 2026

• 🟡 (14:01) User supplied GitHub documentation on required GitHub App permissions: permissions define API resources an app may access; REST responses provide X-Accepted-GitHub-Permissions to indicate endpoint requirements; listed permissions apply to private resources, while some endpoints also support public resources without them; certain endpoints require multiple permissions or any one from a set, denoted in the “Additional permissions” column; token abbreviations are UAT (user access token) and IAT (installation access token).
• 🟡 (14:01) Documentation lists Enterprise Copilot metrics read endpoints, usable with UAT or IAT and no additional permissions: GET /enterprises/{enterprise}/copilot/metrics/reports/enterprise-1-day, GET /enterprises/{enterprise}/copilot/metrics/reports/enterprise-28-day/latest, GET /enterprises/{enterprise}/copilot/metrics/reports/repos-1-day, GET /enterprises/{enterprise}/copilot/metrics/reports/user-teams-1-day, GET /enterprises/{enterprise}/copilot/metrics/reports/users-1-day, and GET /enterprises/{enterprise}/copilot/metrics/reports/users-28-day/latest.
• 🟡 (14:01) Documentation excerpts include GitHub App API permission mappings for organization and repository administration endpoints, including PUT /enterprises/{enterprise}/teams/{enterprise-team}/organizations/{org} (write; UAT/IAT), DELETE /orgs/{org} (write; UAT/IAT), GET /organizations/{org}/settings/billing/usage (read; UAT/IAT), POST /orgs/{org}/personal-access-tokens (write; UAT/IAT), GET /orgs/{org}/personal-access-tokens (read; UAT/IAT), DELETE /repos/{owner}/{repo}/actions/caches/{cache_id} (write; UAT/IAT), PUT /repos/{owner}/{repo}/actions/workflows/{workflow_id}/disable (write; UAT/IAT), and PATCH /repos/{owner}/{repo} (write; UAT/IAT).
• 🟡 (14:01) Documentation excerpts identify repository-team association endpoints PUT /orgs/{org}/teams/{team_slug}/repos/{owner}/{repo} and PUT /teams/{team_id}/repos/{owner}/{repo} as read access with UAT/IAT and additional permissions required.