Forgejo
Restrict how your agents can use Forgejo.
Require agents to confirm every push, or set up custom rules for automation.
ForgejoRelease bot · Acme forgekc_…9a04
| Permission | Access | Repositories | Only when |
|---|---|---|---|
Contents · Read contents.read | Allowed | acme/api | Any request |
Contents · Push contents.push | Allowed | acme/api | git.ref starts with refs/heads/agent/ git.force = false |
Pull requests · Create pulls.create | Allowed | acme/api | Any request |
Pull requests · Merge pulls.merge | Ask meWaits up to 24 hours | acme/api | Any request |
Commit statuses · Read statuses.read | Allowed | acme/* | Any request |
Allowed goes straight throughAsk me waits for your confirmation
What you can control
Permissions
Each row of a key's Forgejo access is one of these, set to Allowed or Ask me.
| Permission | Name in the API |
|---|---|
| Contents · Read | contents.read |
| Contents · Push | contents.push |
| Issues · Read | issues.read |
| Issues · Create | issues.create |
| Comments · Read | comments.read |
| Comments · Create | comments.create |
| Labels · Read | labels.read |
| Labels · Apply | labels.apply |
| Labels · Manage | labels.manage |
| Pull requests · Read | pulls.read |
| Pull requests · Create | pulls.create |
| Pull requests · Edit | pulls.edit |
| Pull requests · Merge | pulls.merge |
| Commit statuses · Read | statuses.read |
| Actions · Read | actions.read |
| Actions · Run | actions.run |
| Actions logs · Read | action_logs.read |
| Repository settings · Read | settings.read |
| Repository settings · Change | settings.change |
| Repository settings · Change default branch | settings.change_default_branch |
| Repository settings · Change visibility | settings.change_visibility |
| Repository settings · Archive | settings.archive |
| Repository settings · Rename | settings.rename |
| Branches · Read | branches.read |
| Branches · Create | branches.create |
| Branches · Rename | branches.rename |
| Branches · Delete | branches.delete |
| Tags · Read | tags.read |
| Tags · Create | tags.create |
| Tags · Delete | tags.delete |
| Branch protection · Read | branch_protection.read |
| Branch protection · Change | branch_protection.change |
| Branch protection · Delete | branch_protection.delete |
| Webhooks · Read | hooks.read |
| Webhooks · Create | hooks.create |
| Webhooks · Change | hooks.change |
| Webhooks · Delete | hooks.delete |
| Webhooks · Test | hooks.test |
| Deploy keys · Read | deploy_keys.read |
| Deploy keys · Add | deploy_keys.add |
| Deploy keys · Delete | deploy_keys.delete |
| Collaborators · Read | collaborators.read |
| Collaborators · Add or change | collaborators.add |
| Collaborators · Remove | collaborators.remove |
| Teams · Read | teams.read |
| Teams · Add | teams.add |
| Teams · Remove | teams.remove |
| Repository · Delete | repo.delete |
| Repository · Transfer | repo.transfer |
| Repositories · List | repositories.list |
| Repositories · Create | repositories.create |
| Repositories · Create in an organization | repositories.create_in_org |
| Organizations · Read | orgs.read |
| Custom rule: a method or git action (git fetch or git push) and a path that you choose. | |