Set allowed actions and reusable workflows for a repository

type Github = {

  token: string;

};

/**

 * Set allowed actions and reusable workflows for a repository

 * Sets the actions and reusable workflows that are allowed in a repository. To use this endpoint, the repository permission policy for `allowed_actions` must be configured to `selected`. For more information, see "[Set GitHub Actions permissions for a repository](#set-github-actions-permissions-for-a-repository)."

You must authenticate using an access token with the `repo` scope to use this endpoint. GitHub Apps must have the `administration` repository permission to use this API.

 */

export async function main(

  auth: Github,

  owner: string,

  repo: string,

  body: {

    github_owned_allowed?: boolean;

    patterns_allowed?: string[];

    verified_allowed?: boolean;

    [k: string]: unknown;

  }

) {

  const url = new URL(

    `https://api.github.com/repos/${owner}/${repo}/actions/permissions/selected-actions`

  );

  const response = await fetch(url, {

    method: "PUT",

    headers: {

      "Content-Type": "application/json",

      Authorization: "Bearer " + auth.token,

    },

    body: JSON.stringify(body),

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.text();

}