Socket for Origin permissions
The Origin and Socket permissions Socket for Origin uses.
Socket for Origin uses two sets of permissions: repository permissions you grant in Origin when you install the app, and Socket permissions you approve when you connect your Socket organization.
Origin repository permissions
| Permission | What Socket uses it for |
|---|---|
repository:contents:read | Read manifest and lockfiles from your repositories |
repository:pull_requests:read | Read pull request details and Origin's proposed merge result |
repository:checks:write | Post the Socket Security check on pull requests and commits |
repository:pull_requests:reviews:read | Find Socket's earlier comments so it can update them in place |
repository:pull_requests:reviews:write | Post and update Socket's pull request comments |
Socket permissions
When you connect, you approve these permissions for Socket for Origin in your Socket organization. Approving them requires the Owner or Admin role.
| Permission | What Socket uses it for |
|---|---|
repo:list, repo:create, repo:update | Create and update the Socket repository for each Origin repository |
full-scans:create, full-scans:list | Upload and read scans of your target branch, proposed merge, and default branch |
diff-scans:create, diff-scans:list | Compare the two scans for each pull request |
Updated 19 days ago
Did this page help you?