GitHub Repository permissions
| Permission | Access | What Trunk uses it for |
|---|---|---|
| Actions | read & write | Read workflow and job results; dispatch or cancel workflow runs triggered by Merge. |
| Administration | read | Read branch protection rules. Trunk cannot edit any org or repo settings. |
| Checks | read & write | Read commit, branch, and PR check status to decide when PRs are ready to merge; post code analysis results. |
| Commit statuses | read | Read commit, branch, and PR status posted by CI providers to decide when PRs are ready to merge. |
| Contents | read & write | Read trunk.yaml; create, update, and delete branches managed by Merge. |
| Issues | read & write | Read and write PR comments. |
| Metadata | read | Required by all GitHub Apps to access repository info. |
| Pull requests | read & write | View and merge PRs managed by Merge. |
| Workflows | read & write | Onboard Trunk Check on CI for GitHub Actions users. |
GitHub Organization permissions
| Permission | Access | What Trunk uses it for |
|---|---|---|
| Events | Read | Track org events to keep app install info current. |
| Members | Read | Subscribe to org rename events to keep app install info current. |