GitHub Security 1
Use GitHub Security 1 in Recued for campaigns, code quality, and code scanning. It includes 90 built-in actions. Connect your GitHub account to use it. Actions that change data use Recued's approval controls.
What this pack installs
- github-rest-security-1 Ingredient
Trust & control
What installing this whole pack would let it do. Recued grants these permissions at install — review them there before approving.
What it's allowed to do
Destructive
Web APIs
github-rest-security-1
external change
Admin: campaigns.create_campaign · Always asksDestructive: campaigns.delete_campaign · Always asksRead: campaigns.get_campaign_summary · Asks approvalRead: campaigns.list_org_campaigns · Asks approvalAdmin: campaigns.update_campaign · Always asksRead: code_quality.get_finding · Asks approvalRead: code_quality.get_setup · Asks approvalRead: code_quality.list_findings_for_repo · Asks approvalAdmin: code_quality.update_setup · Always asksAdmin: code_scanning.commit_autofix · Always asksAdmin: code_scanning.create_autofix · Always asksAdmin: code_scanning.create_variant_analysis · Always asksDestructive: code_scanning.delete_analysis · Always asksDestructive: code_scanning.delete_codeql_database · Always asksRead: code_scanning.get_alert · Asks approvalRead: code_scanning.get_analysis · Asks approvalRead: code_scanning.get_autofix · Asks approvalRead: code_scanning.get_codeql_database · Asks approvalRead: code_scanning.get_default_setup · Asks approvalRead: code_scanning.get_sarif · Asks approvalRead: code_scanning.get_variant_analysis · Asks approvalRead: code_scanning.get_variant_analysis_repo_task · Asks approvalRead: code_scanning.list_alert_instances · Asks approvalRead: code_scanning.list_alerts_for_org · Asks approvalRead: code_scanning.list_alerts_for_repo · Asks approvalRead: code_scanning.list_codeql_databases · Asks approvalRead: code_scanning.list_recent_analyses · Asks approvalAdmin: code_scanning.update_alert · Always asksAdmin: code_scanning.update_default_setup · Always asksAdmin: code_scanning.upload_sarif · Always asksAdmin: code_security.attach_configuration · Always asksAdmin: code_security.attach_enterprise_configuration · Always asksAdmin: code_security.create_configuration · Always asksAdmin: code_security.create_configuration_for_enterprise · Always asksDestructive: code_security.delete_configuration · Always asksDestructive: code_security.delete_configuration_for_enterprise · Always asksDestructive: code_security.detach_configuration · Always asksRead: code_security.get_configuration · Asks approvalRead: code_security.get_configuration_for_repository · Asks approvalRead: code_security.get_configurations_for_enterprise · Asks approvalRead: code_security.get_configurations_for_org · Asks approvalRead: code_security.get_default_configurations · Asks approvalRead: code_security.get_default_configurations_for_enterprise · Asks approvalRead: code_security.get_repositories_for_configuration · Asks approvalRead: code_security.get_repositories_for_enterprise_configuration · Asks approvalRead: code_security.get_single_configuration_for_enterprise · Asks approvalAdmin: code_security.set_configuration_as_default · Always asksAdmin: code_security.set_configuration_as_default_for_enterprise · Always asksAdmin: code_security.update_configuration · Always asksAdmin: code_security.update_enterprise_configuration · Always asksDestructive: credentials.revoke · Always asksAdmin: dependabot.add_selected_repo_to_org_secret · Always asksAdmin: dependabot.create_or_update_org_secret · Always asksAdmin: dependabot.create_or_update_repo_secret · Always asksDestructive: dependabot.delete_org_secret · Always asksDestructive: dependabot.delete_repo_secret · Always asksRead: dependabot.get_alert · Asks approvalRead: dependabot.get_org_public_key · Asks approvalRead: dependabot.get_org_secret · Asks approvalRead: dependabot.get_repo_public_key · Asks approvalRead: dependabot.get_repo_secret · Asks approvalRead: dependabot.list_alerts_for_enterprise · Asks approvalRead: dependabot.list_alerts_for_org · Asks approvalRead: dependabot.list_alerts_for_repo · Asks approvalRead: dependabot.list_org_secrets · Asks approvalRead: dependabot.list_repo_secrets · Asks approvalRead: dependabot.list_selected_repos_for_org_secret · Asks approvalDestructive: dependabot.remove_selected_repo_from_org_secret · Always asksRead: dependabot.repository_access_for_enterprise · Asks approvalRead: dependabot.repository_access_for_org · Asks approvalAdmin: dependabot.set_repository_access_default_level · Always asksAdmin: dependabot.set_repository_access_default_level_for_enterprise · Always asksAdmin: dependabot.set_selected_repos_for_org_secret · Always asksAdmin: dependabot.update_alert · Always asksAdmin: dependabot.update_repository_access_for_enterprise · Always asksAdmin: dependabot.update_repository_access_for_org · Always asksAdmin: dependency_graph.create_repository_snapshot · Always asksRead: dependency_graph.diff_range · Asks approvalRead: dependency_graph.export_sbom · Asks approvalRead: dependency_graph.generate_sbom_report · Asks approvalAdmin: private_registries.create_org_private_registry · Always asksDestructive: private_registries.delete_org_private_registry · Always asksRead: private_registries.get_org_private_registry · Asks approvalRead: private_registries.get_org_public_key · Asks approvalRead: private_registries.list_org_private_registries · Asks approvalAdmin: private_registries.update_org_private_registry · Always asksAdmin: secret_scanning.bulk_create_org_custom_patterns · Always asksAdmin: secret_scanning.bulk_create_repo_custom_patterns · Always asksDestructive: secret_scanning.bulk_delete_org_custom_patterns · Always asksDestructive: secret_scanning.bulk_delete_repo_custom_patterns · Always asks