Set selected repositories for an organization secret

type Github = {

  token: string;

};

/**

 * Set selected repositories for an organization secret

 * Replaces all repositories for an organization secret when the `visibility` for repository access is set to `selected`. The visibility is set when you [Create or update an organization secret](https://docs.github.com/rest/reference/dependabot#create-or-update-an-organization-secret). You must authenticate using an access token with the `admin:org` scope to use this endpoint. GitHub Apps must have the `dependabot_secrets` organization permission to use this endpoint.

 */

export async function main(

  auth: Github,

  org: string,

  secret_name: string,

  body: { selected_repository_ids: number[]; [k: string]: unknown }

) {

  const url = new URL(

    `https://api.github.com/orgs/${org}/dependabot/secrets/${secret_name}/repositories`

  );

  const response = await fetch(url, {

    method: "PUT",

    headers: {

      "Content-Type": "application/json",

      Authorization: "Bearer " + auth.token,

    },

    body: JSON.stringify(body),

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.text();

}