import * as pulumi from "@pulumi/pulumi"; /** * This resource allows you to manage GitHub Actions workflow permissions for a GitHub Organization account. This controls the default permissions granted to the GITHUB_TOKEN when running workflows and whether GitHub Actions can approve pull request reviews. * * You must have organization admin access to use this resource. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as github from "@pulumi/github"; * * // Basic workflow permissions configuration * const example = new github.ActionsOrganizationWorkflowPermissions("example", { * organizationSlug: "my-organization", * defaultWorkflowPermissions: "read", * canApprovePullRequestReviews: false, * }); * // Allow write permissions and PR approvals * const permissive = new github.ActionsOrganizationWorkflowPermissions("permissive", { * organizationSlug: "my-organization", * defaultWorkflowPermissions: "write", * canApprovePullRequestReviews: true, * }); * ``` * * ## Notes * * > **Note:** This resource requires a GitHub Organization account and organization admin permissions. * * When this resource is destroyed, the workflow permissions will be reset to safe defaults: * * * `defaultWorkflowPermissions` = `read` * * `canApprovePullRequestReviews` = `false` * * ## Import * * Organization Actions workflow permissions can be imported using the organization slug: * * ```sh * $ pulumi import github:index/actionsOrganizationWorkflowPermissions:ActionsOrganizationWorkflowPermissions example my-organization * ``` */ export declare class ActionsOrganizationWorkflowPermissions extends pulumi.CustomResource { /** * Get an existing ActionsOrganizationWorkflowPermissions resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: ActionsOrganizationWorkflowPermissionsState, opts?: pulumi.CustomResourceOptions): ActionsOrganizationWorkflowPermissions; /** * Returns true if the given object is an instance of ActionsOrganizationWorkflowPermissions. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is ActionsOrganizationWorkflowPermissions; /** * Whether GitHub Actions can approve pull request reviews. Defaults to `false`. */ readonly canApprovePullRequestReviews: pulumi.Output; /** * The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`. */ readonly defaultWorkflowPermissions: pulumi.Output; /** * The slug of the organization. */ readonly organizationSlug: pulumi.Output; /** * Create a ActionsOrganizationWorkflowPermissions resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: ActionsOrganizationWorkflowPermissionsArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering ActionsOrganizationWorkflowPermissions resources. */ export interface ActionsOrganizationWorkflowPermissionsState { /** * Whether GitHub Actions can approve pull request reviews. Defaults to `false`. */ canApprovePullRequestReviews?: pulumi.Input; /** * The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`. */ defaultWorkflowPermissions?: pulumi.Input; /** * The slug of the organization. */ organizationSlug?: pulumi.Input; } /** * The set of arguments for constructing a ActionsOrganizationWorkflowPermissions resource. */ export interface ActionsOrganizationWorkflowPermissionsArgs { /** * Whether GitHub Actions can approve pull request reviews. Defaults to `false`. */ canApprovePullRequestReviews?: pulumi.Input; /** * The default workflow permissions granted to the GITHUB_TOKEN when running workflows. Can be `read` or `write`. Defaults to `read`. */ defaultWorkflowPermissions?: pulumi.Input; /** * The slug of the organization. */ organizationSlug: pulumi.Input; } //# sourceMappingURL=actionsOrganizationWorkflowPermissions.d.ts.map