GitHub Permissions
Reviewpad is distributed as a GitHub App. This means that it is installed on your GitHub account and has access to your repositories.
The repositories to which Reviewpad has access are defined at the installation time. All repositories outside of the defined list are not accessible to Reviewpad.
Reviewpad executions do not communicate between them, they are ephemeral and run in an isolated environment from other users so that there is no possibility of information leaks between environments.
Permissions
Reviewpad requires the following permissions:
Repository permissions
| Description | Permissions |
|---|---|
| Actions | Read and write |
| Administration | Read-only |
| Checks | Read and write |
| Code scanning alerts | Read-only |
| Commit statuses | Read and write |
| Contents | Read and write |
| Dependabot alerts | Read-only |
| Deployments | Read-only |
| Issues | Read and write |
| Merge queues | Read and write |
| Metadata | Read-only |
| Packages | Read-only |
| Pull requests | Read and write |
| Secret scanning alerts | Read-only |
| Webhooks | Read and write |
Repository permissions
| Description | Permissions |
|---|---|
| Administration | Read-only |
| Members | Read-only |
| Projects | Read and write |