Get default workflow permissions for an organization

type Github = {

  token: string;

};

/**

 * Get default workflow permissions for an organization

 * Gets the default workflow permissions granted to the `GITHUB_TOKEN` when running workflows in an organization,

as well as whether GitHub Actions can submit approving pull request reviews.

 */

export async function main(auth: Github, org: string) {

  const url = new URL(

    `https://api.github.com/orgs/${org}/actions/permissions/workflow`

  );

  const response = await fetch(url, {

    method: "GET",

    headers: {

      Authorization: "Bearer " + auth.token,

    },

    body: undefined,

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.json();

}