Reference A: GitHub Enterprise OAuth scopes

OAuth scopes required for GitHub Enterprise Server onboarding.

Reference A: GitHub Enterprise OAuth scopes

The Cortex application requires these OAuth scopes:

• repo: Full access to public and private repositories.
• read:user: Read user profile data.
• read:repo_hook: Read and ping repository hooks.
• read:org: Read organization membership, projects, and teams.
• read:public_key: List and view public keys.
• workflow: Add and update GitHub Actions workflow files.
• admin:org_hook: Manage organization hooks created by the OAuth application.

The repo scope also manages organization-owned projects, invitations, team memberships, and webhooks.