Socket for Origin permissions

The Origin and Socket permissions Socket for Origin uses.

Socket for Origin uses two sets of permissions: repository permissions you grant in Origin when you install the app, and Socket permissions you approve when you connect your Socket organization.

Origin repository permissions

PermissionWhat Socket uses it for
repository:contents:readRead manifest and lockfiles from your repositories
repository:pull_requests:readRead pull request details and Origin's proposed merge result
repository:checks:writePost the Socket Security check on pull requests and commits
repository:pull_requests:reviews:readFind Socket's earlier comments so it can update them in place
repository:pull_requests:reviews:writePost and update Socket's pull request comments

Socket permissions

When you connect, you approve these permissions for Socket for Origin in your Socket organization. Approving them requires the Owner or Admin role.

PermissionWhat Socket uses it for
repo:list, repo:create, repo:updateCreate and update the Socket repository for each Origin repository
full-scans:create, full-scans:listUpload and read scans of your target branch, proposed merge, and default branch
diff-scans:create, diff-scans:listCompare the two scans for each pull request

Did this page help you?