import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
export interface ActionsHostedRunnerImage {
    /**
     * The image ID. For GitHub-owned images, use numeric IDs like "2306" for Ubuntu Latest 24.04. To get available images, use the GitHub API: `GET /orgs/{org}/actions/hosted-runners/images/github-owned`.
     */
    id: pulumi.Input<string>;
    /**
     * The size of the image in gigabytes.
     */
    sizeGb?: pulumi.Input<number | undefined>;
    /**
     * The image source. Valid values are "github", "partner", or "custom". Defaults to "github".
     */
    source?: pulumi.Input<string | undefined>;
}
export interface ActionsHostedRunnerMachineSizeDetail {
    /**
     * Number of CPU cores.
     */
    cpuCores?: pulumi.Input<number | undefined>;
    /**
     * Machine size identifier.
     */
    id?: pulumi.Input<string | undefined>;
    /**
     * Amount of memory in gigabytes.
     */
    memoryGb?: pulumi.Input<number | undefined>;
    /**
     * Amount of storage in gigabytes.
     */
    storageGb?: pulumi.Input<number | undefined>;
}
export interface ActionsHostedRunnerPublicIp {
    /**
     * Whether this IP range is enabled.
     */
    enabled?: pulumi.Input<boolean | undefined>;
    /**
     * Subnet length.
     */
    length?: pulumi.Input<number | undefined>;
    /**
     * IP address prefix.
     */
    prefix?: pulumi.Input<string | undefined>;
}
export interface ActionsOrganizationPermissionsAllowedActionsConfig {
    /**
     * Whether GitHub-owned actions are allowed in the organization.
     */
    githubOwnedAllowed: pulumi.Input<boolean>;
    /**
     * Specifies a list of string-matching patterns to allow specific action(s). Wildcards, tags, and SHAs are allowed. For example, monalisa/octocat@*, monalisa/octocat@v2, monalisa/*."
     */
    patternsAlloweds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Whether actions in GitHub Marketplace from verified creators are allowed. Set to true to allow all GitHub Marketplace actions by verified creators.
     */
    verifiedAllowed?: pulumi.Input<boolean | undefined>;
}
export interface ActionsOrganizationPermissionsEnabledRepositoriesConfig {
    /**
     * List of repository IDs to enable for GitHub Actions.
     */
    repositoryIds: pulumi.Input<pulumi.Input<number>[]>;
}
export interface ActionsRepositoryPermissionsAllowedActionsConfig {
    /**
     * Whether GitHub-owned actions are allowed in the repository.
     */
    githubOwnedAllowed: pulumi.Input<boolean>;
    /**
     * Specifies a list of string-matching patterns to allow specific action(s). Wildcards, tags, and SHAs are allowed. For example, monalisa/octocat@*, monalisa/octocat@v2, monalisa/*."
     */
    patternsAlloweds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Whether actions in GitHub Marketplace from verified creators are allowed. Set to true to allow all GitHub Marketplace actions by verified creators.
     */
    verifiedAllowed?: pulumi.Input<boolean | undefined>;
}
export interface BranchProtectionRequiredPullRequestReview {
    /**
     * Dismiss approved reviews automatically when a new commit is pushed. Defaults to `false`.
     */
    dismissStaleReviews?: pulumi.Input<boolean | undefined>;
    /**
     * The list of actor Names/IDs with dismissal access. If not empty, `restrictDismissals` is ignored. Actor names must either begin with a "/" for users or the organization name followed by a "/" for teams.
     */
    dismissalRestrictions?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * The list of actor Names/IDs that are allowed to bypass pull request requirements. Actor names must either begin with a "/" for users or the organization name followed by a "/" for teams.
     */
    pullRequestBypassers?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Require an approved review in pull requests including files with a designated code owner. Defaults to `false`.
     */
    requireCodeOwnerReviews?: pulumi.Input<boolean | undefined>;
    /**
     * Require that The most recent push must be approved by someone other than the last pusher.  Defaults to `false`
     */
    requireLastPushApproval?: pulumi.Input<boolean | undefined>;
    /**
     * Require x number of approvals to satisfy branch protection requirements. If this is specified it must be a number between 0-6. This requirement matches GitHub's API, see the upstream [documentation](https://developer.github.com/v3/repos/branches/#parameters-1) for more information.
     * (https://developer.github.com/v3/repos/branches/#parameters-1) for more information.
     */
    requiredApprovingReviewCount?: pulumi.Input<number | undefined>;
    /**
     * Restrict pull request review dismissals.
     */
    restrictDismissals?: pulumi.Input<boolean | undefined>;
}
export interface BranchProtectionRequiredStatusCheck {
    /**
     * The list of status checks to require in order to merge into this branch. No status checks are required by default.
     *
     * > Note: This attribute can contain multiple string patterns.
     * If specified, usual value is the [job name](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idname). Otherwise, the [job id](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idname) is defaulted to.
     * For workflows that use matrixes, append the matrix name to the value using the following pattern `(<matrix_value>[, <matrix_value>])`. Matrixes should be specified based on the order of matrix properties in the workflow file. See GitHub Documentation for more information.
     * For workflows that use reusable workflows, the pattern is `<initial_workflow.jobs.job.[name/id]> / <reused-workflow.jobs.job.[name/id]>`. This can extend multiple levels.
     */
    contexts?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Require branches to be up to date before merging. Defaults to `false`.
     */
    strict?: pulumi.Input<boolean | undefined>;
}
export interface BranchProtectionRestrictPush {
    /**
     * Boolean, setting this to `false` allows people, teams, or apps to create new branches matching this rule. Defaults to `true`.
     */
    blocksCreations?: pulumi.Input<boolean | undefined>;
    /**
     * A list of actor Names/IDs that may push to the branch. Actor names must either begin with a "/" for users or the organization name followed by a "/" for teams. Organization administrators, repository administrators, and users with the Maintain role on the repository can always push when all other requirements have passed.
     */
    pushAllowances?: pulumi.Input<pulumi.Input<string>[] | undefined>;
}
export interface BranchProtectionV3RequiredPullRequestReviews {
    /**
     * Allow specific users, teams, or apps to bypass pull request requirements. See Bypass Pull Request Allowances below for details.
     */
    bypassPullRequestAllowances?: pulumi.Input<inputs.BranchProtectionV3RequiredPullRequestReviewsBypassPullRequestAllowances | undefined>;
    /**
     * Dismiss approved reviews automatically when a new commit is pushed. Defaults to `false`.
     */
    dismissStaleReviews?: pulumi.Input<boolean | undefined>;
    /**
     * The list of app slugs with dismissal access.
     */
    dismissalApps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * The list of team slugs with dismissal access.
     * Always use `slug` of the team, **not** its name. Each team already **has** to have access to the repository.
     */
    dismissalTeams?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * The list of user logins with dismissal access
     */
    dismissalUsers?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * @deprecated Use enforceAdmins instead
     */
    includeAdmins?: pulumi.Input<boolean | undefined>;
    /**
     * Require an approved review in pull requests including files with a designated code owner. Defaults to `false`.
     */
    requireCodeOwnerReviews?: pulumi.Input<boolean | undefined>;
    /**
     * Require that the most recent push must be approved by someone other than the last pusher.  Defaults to `false`
     */
    requireLastPushApproval?: pulumi.Input<boolean | undefined>;
    /**
     * Require x number of approvals to satisfy branch protection requirements. If this is specified it must be a number between 0-6. This requirement matches GitHub's API, see the upstream [documentation](https://developer.github.com/v3/repos/branches/#parameters-1) for more information.
     */
    requiredApprovingReviewCount?: pulumi.Input<number | undefined>;
}
export interface BranchProtectionV3RequiredPullRequestReviewsBypassPullRequestAllowances {
    /**
     * The list of app slugs allowed to bypass pull request requirements.
     */
    apps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * The list of team slugs allowed to bypass pull request requirements.
     */
    teams?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * The list of user logins allowed to bypass pull request requirements.
     */
    users?: pulumi.Input<pulumi.Input<string>[] | undefined>;
}
export interface BranchProtectionV3RequiredStatusChecks {
    /**
     * The list of status checks to require in order to merge into this branch. No status checks are required by default. Checks should be strings containing the context and appId like so "context:app_id".
     */
    checks?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * [**DEPRECATED**] (Optional) The list of status checks to require in order to merge into this branch. No status checks are required by default.
     *
     * > Note: This attribute can contain multiple string patterns.
     * If specified, usual value is the [job name](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idname). Otherwise, the [job id](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idname) is defaulted to.
     * For workflows that use matrixes, append the matrix name to the value using the following pattern `(<matrix_value>[, <matrix_value>])`. Matrixes should be specified based on the order of matrix properties in the workflow file. See GitHub Documentation for more information.
     * For workflows that use reusable workflows, the pattern is `<initial_workflow.jobs.job.[name/id]> / <reused-workflow.jobs.job.[name/id]>`. This can extend multiple levels.
     *
     * @deprecated GitHub is deprecating the use of `contexts`. Use a `checks` array instead.
     */
    contexts?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * @deprecated Use enforceAdmins instead
     */
    includeAdmins?: pulumi.Input<boolean | undefined>;
    /**
     * Require branches to be up to date before merging. Defaults to `false`.
     */
    strict?: pulumi.Input<boolean | undefined>;
}
export interface BranchProtectionV3Restrictions {
    /**
     * The list of app slugs with push access.
     *
     * `restrictions` is only available for organization-owned repositories.
     */
    apps?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * The list of team slugs with push access.
     * Always use `slug` of the team, **not** its name. Each team already **has** to have access to the repository.
     */
    teams?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * The list of user logins with push access.
     */
    users?: pulumi.Input<pulumi.Input<string>[] | undefined>;
}
export interface EnterpriseActionsPermissionsAllowedActionsConfig {
    /**
     * Whether GitHub-owned actions are allowed in the organization.
     */
    githubOwnedAllowed: pulumi.Input<boolean>;
    /**
     * Specifies a list of string-matching patterns to allow specific action(s). Wildcards, tags, and SHAs are allowed. For example, monalisa/octocat@*, monalisa/octocat@v2, monalisa/*."
     */
    patternsAlloweds?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * Whether actions in GitHub Marketplace from verified creators are allowed. Set to true to allow all GitHub Marketplace actions by verified creators.
     */
    verifiedAllowed?: pulumi.Input<boolean | undefined>;
}
export interface EnterpriseActionsPermissionsEnabledOrganizationsConfig {
    /**
     * List of organization IDs to enable for GitHub Actions.
     */
    organizationIds: pulumi.Input<pulumi.Input<number>[]>;
}
export interface IssueLabelsLabel {
    /**
     * A 6 character hex code, **without the leading #**, identifying the color of the label.
     */
    color: pulumi.Input<string>;
    /**
     * A short description of the label.
     */
    description?: pulumi.Input<string | undefined>;
    /**
     * The name of the label.
     */
    name: pulumi.Input<string>;
    /**
     * The URL to the issue label
     */
    url?: pulumi.Input<string | undefined>;
}
export interface OrganizationRulesetBypassActor {
    /**
     * (Number) The ID of the actor that can bypass a ruleset. Some actor types such as `DeployKey` do not have an ID.
     */
    actorId?: pulumi.Input<number | undefined>;
    /**
     * The type of actor that can bypass a ruleset. Can be one of: `RepositoryRole`, `Team`, `Integration`, `OrganizationAdmin`.
     */
    actorType: pulumi.Input<string>;
    /**
     * (String) When the specified actor can bypass the ruleset. pullRequest means that an actor can only bypass rules on pull requests. Can be one of: `always`, `pullRequest`, `exempt`.
     *
     * ~>Note: at the time of writing this, the following actor types correspond to the following actor IDs:
     *
     * - `OrganizationAdmin` > `1`
     * - `RepositoryRole` (This is the actor type, the following are the base repository roles and their associated IDs.)
     */
    bypassMode: pulumi.Input<string>;
}
export interface OrganizationRulesetConditions {
    /**
     * (Block List, Max: 1) Required for `branch` and `tag` targets. Must NOT be set for `push` targets. (see below for nested schema)
     */
    refName?: pulumi.Input<inputs.OrganizationRulesetConditionsRefName | undefined>;
    /**
     * The repository IDs that the ruleset applies to. One of these IDs must match for the condition to pass.
     */
    repositoryIds?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * Targets repositories that match the specified name patterns. (see below for nested schema)
     */
    repositoryName?: pulumi.Input<inputs.OrganizationRulesetConditionsRepositoryName | undefined>;
    /**
     * Targets repositories by custom or system properties. (see below for nested schema)
     *
     * Exactly one of `repositoryId`, `repositoryName`, or `repositoryProperty` must be set for the rule to target repositories.
     *
     * > **Note:** For `push` targets, do not include `refName` in conditions. Push rulesets operate on file content, not on refs.
     */
    repositoryProperty?: pulumi.Input<inputs.OrganizationRulesetConditionsRepositoryProperty | undefined>;
}
export interface OrganizationRulesetConditionsRefName {
    /**
     * Array of ref names or patterns to exclude. The condition will not pass if any of these patterns match.
     */
    excludes: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Array of ref names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~DEFAULT_BRANCH` to include the default branch or `~ALL` to include all branches.
     */
    includes: pulumi.Input<pulumi.Input<string>[]>;
}
export interface OrganizationRulesetConditionsRepositoryName {
    /**
     * Array of repository names or patterns to exclude. The condition will not pass if any of these patterns match.
     */
    excludes: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Array of repository names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~ALL` to include all repositories.
     */
    includes: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Whether renaming of target repositories is prevented.
     */
    protected?: pulumi.Input<boolean | undefined>;
}
export interface OrganizationRulesetConditionsRepositoryProperty {
    /**
     * The repository properties and values to exclude. The ruleset will not apply if any of these properties match.
     */
    excludes?: pulumi.Input<pulumi.Input<inputs.OrganizationRulesetConditionsRepositoryPropertyExclude>[] | undefined>;
    /**
     * The repository properties and values to include. All of these properties must match for the condition to pass.
     */
    includes?: pulumi.Input<pulumi.Input<inputs.OrganizationRulesetConditionsRepositoryPropertyInclude>[] | undefined>;
}
export interface OrganizationRulesetConditionsRepositoryPropertyExclude {
    /**
     * (String) The name of the ruleset.
     */
    name: pulumi.Input<string>;
    /**
     * The values to match for the repository property.
     */
    propertyValues: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * The source of the repository property. Defaults to 'custom' if not specified. Can be one of: custom, system
     */
    source?: pulumi.Input<string | undefined>;
}
export interface OrganizationRulesetConditionsRepositoryPropertyInclude {
    /**
     * (String) The name of the ruleset.
     */
    name: pulumi.Input<string>;
    /**
     * The values to match for the repository property.
     */
    propertyValues: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * The source of the repository property. Defaults to 'custom' if not specified. Can be one of: custom, system
     */
    source?: pulumi.Input<string | undefined>;
}
export interface OrganizationRulesetRules {
    /**
     * (Block List, Max: 1) Parameters to be used for the branchNamePattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. Conflicts with `tagNamePattern` as it only applies to rulesets with target `branch`. (see below for nested schema)
     */
    branchNamePattern?: pulumi.Input<inputs.OrganizationRulesetRulesBranchNamePattern | undefined>;
    /**
     * (Block List, Max: 1) Parameters to be used for the commitAuthorEmailPattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. (see below for nested schema)
     */
    commitAuthorEmailPattern?: pulumi.Input<inputs.OrganizationRulesetRulesCommitAuthorEmailPattern | undefined>;
    /**
     * (Block List, Max: 1) Parameters to be used for the commitMessagePattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. (see below for nested schema)
     */
    commitMessagePattern?: pulumi.Input<inputs.OrganizationRulesetRulesCommitMessagePattern | undefined>;
    /**
     * (Block List, Max: 1) Parameters to be used for the committerEmailPattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. (see below for nested schema)
     */
    committerEmailPattern?: pulumi.Input<inputs.OrganizationRulesetRulesCommitterEmailPattern | undefined>;
    /**
     * (Block List, Max: 1) Automatically request Copilot code review for new pull requests if the author has access to Copilot code review and their premium requests quota has not reached the limit. (see below for nested schema)
     */
    copilotCodeReview?: pulumi.Input<inputs.OrganizationRulesetRulesCopilotCodeReview | undefined>;
    /**
     * (Boolean) Only allow users with bypass permission to create matching refs.
     */
    creation?: pulumi.Input<boolean | undefined>;
    /**
     * (Boolean) Only allow users with bypass permissions to delete matching refs.
     */
    deletion?: pulumi.Input<boolean | undefined>;
    /**
     * (Block List, Max: 1) Prevent commits that include files with specified file extensions from being pushed to the commit graph. This rule only applies to rulesets with target `push`. (see below for nested schema)
     */
    fileExtensionRestriction?: pulumi.Input<inputs.OrganizationRulesetRulesFileExtensionRestriction | undefined>;
    /**
     * (Block List, Max: 1) Prevent commits that include changes to specified file paths from being pushed to the commit graph. This rule only applies to rulesets with target `push`. (see below for nested schema)
     */
    filePathRestriction?: pulumi.Input<inputs.OrganizationRulesetRulesFilePathRestriction | undefined>;
    /**
     * (Integer) The maximum number of characters allowed in file paths.
     */
    maxFilePathLength?: pulumi.Input<inputs.OrganizationRulesetRulesMaxFilePathLength | undefined>;
    /**
     * (Integer) The maximum allowed size, in megabytes (MB), of a file. Valid range is 1-100 MB.
     */
    maxFileSize?: pulumi.Input<inputs.OrganizationRulesetRulesMaxFileSize | undefined>;
    /**
     * (Boolean) Prevent users with push access from force pushing to branches.
     */
    nonFastForward?: pulumi.Input<boolean | undefined>;
    /**
     * (Block List, Max: 1) Require all commits be made to a non-target branch and submitted via a pull request before they can be merged. (see below for nested schema)
     */
    pullRequest?: pulumi.Input<inputs.OrganizationRulesetRulesPullRequest | undefined>;
    /**
     * (Block List, Max: 1) Define which tools must provide code scanning results before the reference is updated. When configured, code scanning must be enabled and have results for both the commit and the reference being updated. Multiple code scanning tools can be specified. (see below for nested schema)
     */
    requiredCodeScanning?: pulumi.Input<inputs.OrganizationRulesetRulesRequiredCodeScanning | undefined>;
    /**
     * (Boolean) Prevent merge commits from being pushed to matching branches.
     */
    requiredLinearHistory?: pulumi.Input<boolean | undefined>;
    /**
     * (Boolean) Commits pushed to matching branches must have verified signatures.
     */
    requiredSignatures?: pulumi.Input<boolean | undefined>;
    /**
     * (Block List, Max: 1) Choose which status checks must pass before branches can be merged into a branch that matches this rule. When enabled, commits must first be pushed to another branch, then merged or pushed directly to a branch that matches this rule after status checks have passed. (see below for nested schema)
     */
    requiredStatusChecks?: pulumi.Input<inputs.OrganizationRulesetRulesRequiredStatusChecks | undefined>;
    /**
     * (Block List, Max: 1) Define which Actions workflows must pass before changes can be merged into a branch matching the rule. Multiple workflows can be specified. (see below for nested schema)
     */
    requiredWorkflows?: pulumi.Input<inputs.OrganizationRulesetRulesRequiredWorkflows | undefined>;
    /**
     * (Block List, Max: 1) Parameters to be used for the tagNamePattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. Conflicts with `branchNamePattern` as it only applies to rulesets with target `tag`. (see below for nested schema)
     */
    tagNamePattern?: pulumi.Input<inputs.OrganizationRulesetRulesTagNamePattern | undefined>;
    /**
     * (Boolean) Only allow users with bypass permission to update matching refs.
     */
    update?: pulumi.Input<boolean | undefined>;
}
export interface OrganizationRulesetRulesBranchNamePattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface OrganizationRulesetRulesCommitAuthorEmailPattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface OrganizationRulesetRulesCommitMessagePattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface OrganizationRulesetRulesCommitterEmailPattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface OrganizationRulesetRulesCopilotCodeReview {
    /**
     * Copilot automatically reviews draft pull requests before they are marked as ready for review. Defaults to `false`.
     */
    reviewDraftPullRequests?: pulumi.Input<boolean | undefined>;
    /**
     * Copilot automatically reviews each new push to the pull request. Defaults to `false`.
     */
    reviewOnPush?: pulumi.Input<boolean | undefined>;
}
export interface OrganizationRulesetRulesFileExtensionRestriction {
    /**
     * The file extensions that are restricted from being pushed to the commit graph.
     */
    restrictedFileExtensions: pulumi.Input<pulumi.Input<string>[]>;
}
export interface OrganizationRulesetRulesFilePathRestriction {
    /**
     * The file paths that are restricted from being pushed to the commit graph.
     */
    restrictedFilePaths: pulumi.Input<pulumi.Input<string>[]>;
}
export interface OrganizationRulesetRulesMaxFilePathLength {
    /**
     * The maximum allowed length of a file path.
     */
    maxFilePathLength: pulumi.Input<number>;
}
export interface OrganizationRulesetRulesMaxFileSize {
    /**
     * The maximum allowed size of a file in megabytes (MB). Valid range is 1-100 MB.
     */
    maxFileSize: pulumi.Input<number>;
}
export interface OrganizationRulesetRulesPullRequest {
    /**
     * Array of allowed merge methods. Allowed values include `merge`, `squash`, and `rebase`. At least one option must be enabled.
     */
    allowedMergeMethods?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * New, reviewable commits pushed will dismiss previous pull request review approvals. Defaults to `false`.
     */
    dismissStaleReviewsOnPush?: pulumi.Input<boolean | undefined>;
    /**
     * Require an approving review in pull requests that modify files that have a designated code owner. Defaults to `false`.
     */
    requireCodeOwnerReview?: pulumi.Input<boolean | undefined>;
    /**
     * Whether the most recent reviewable push must be approved by someone other than the person who pushed it. Defaults to `false`.
     */
    requireLastPushApproval?: pulumi.Input<boolean | undefined>;
    /**
     * The number of approving reviews that are required before a pull request can be merged. Defaults to `0`.
     */
    requiredApprovingReviewCount?: pulumi.Input<number | undefined>;
    /**
     * All conversations on code must be resolved before a pull request can be merged. Defaults to `false`.
     */
    requiredReviewThreadResolution?: pulumi.Input<boolean | undefined>;
    /**
     * Require specific reviewers to approve pull requests targeting matching branches. Note: This feature is in beta and subject to change.
     */
    requiredReviewers?: pulumi.Input<pulumi.Input<inputs.OrganizationRulesetRulesPullRequestRequiredReviewer>[] | undefined>;
}
export interface OrganizationRulesetRulesPullRequestRequiredReviewer {
    /**
     * File patterns (fnmatch syntax) that this reviewer must approve.
     */
    filePatterns: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Minimum number of approvals required from this reviewer. Set to 0 to make approval optional.
     */
    minimumApprovals: pulumi.Input<number>;
    /**
     * The reviewer that must review matching files.
     */
    reviewer: pulumi.Input<inputs.OrganizationRulesetRulesPullRequestRequiredReviewerReviewer>;
}
export interface OrganizationRulesetRulesPullRequestRequiredReviewerReviewer {
    /**
     * The ID of the reviewer that must review.
     */
    id: pulumi.Input<number>;
    /**
     * The type of reviewer. Currently only `Team` is supported.
     */
    type: pulumi.Input<string>;
}
export interface OrganizationRulesetRulesRequiredCodeScanning {
    /**
     * Tools that must provide code scanning results for this rule to pass.
     */
    requiredCodeScanningTools: pulumi.Input<pulumi.Input<inputs.OrganizationRulesetRulesRequiredCodeScanningRequiredCodeScanningTool>[]>;
}
export interface OrganizationRulesetRulesRequiredCodeScanningRequiredCodeScanningTool {
    /**
     * The severity level at which code scanning results that raise alerts block a reference update. Can be one of: `none`, `errors`, `errorsAndWarnings`, `all`.
     */
    alertsThreshold: pulumi.Input<string>;
    /**
     * The severity level at which code scanning results that raise security alerts block a reference update. Can be one of: `none`, `critical`, `highOrHigher`, `mediumOrHigher`, `all`.
     */
    securityAlertsThreshold: pulumi.Input<string>;
    /**
     * The name of a code scanning tool.
     */
    tool: pulumi.Input<string>;
}
export interface OrganizationRulesetRulesRequiredStatusChecks {
    /**
     * (Boolean) Allow repositories and branches to be created if a check would otherwise prohibit it. Defaults to `false`.
     */
    doNotEnforceOnCreate?: pulumi.Input<boolean | undefined>;
    /**
     * Status checks that are required. Several can be defined.
     */
    requiredChecks: pulumi.Input<pulumi.Input<inputs.OrganizationRulesetRulesRequiredStatusChecksRequiredCheck>[]>;
    /**
     * Whether pull requests targeting a matching branch must be tested with the latest code. This setting will not take effect unless at least one status check is enabled. Defaults to `false`.
     */
    strictRequiredStatusChecksPolicy?: pulumi.Input<boolean | undefined>;
}
export interface OrganizationRulesetRulesRequiredStatusChecksRequiredCheck {
    /**
     * The status check context name that must be present on the commit.
     */
    context: pulumi.Input<string>;
    /**
     * The optional integration ID that this status check must originate from.
     */
    integrationId?: pulumi.Input<number | undefined>;
}
export interface OrganizationRulesetRulesRequiredWorkflows {
    /**
     * Allow repositories and branches to be created if a check would otherwise prohibit it.
     */
    doNotEnforceOnCreate?: pulumi.Input<boolean | undefined>;
    /**
     * Actions workflows that are required. Several can be defined.
     */
    requiredWorkflows: pulumi.Input<pulumi.Input<inputs.OrganizationRulesetRulesRequiredWorkflowsRequiredWorkflow>[]>;
}
export interface OrganizationRulesetRulesRequiredWorkflowsRequiredWorkflow {
    /**
     * The path to the workflow YAML definition file.
     */
    path: pulumi.Input<string>;
    /**
     * The ref (branch or tag) of the workflow file to use.
     */
    ref?: pulumi.Input<string | undefined>;
    /**
     * The repository in which the workflow is defined.
     */
    repositoryId: pulumi.Input<number>;
}
export interface OrganizationRulesetRulesTagNamePattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface OrganizationWebhookConfiguration {
    /**
     * The content type for the payload. Valid values are either 'form' or 'json'.
     */
    contentType?: pulumi.Input<string | undefined>;
    /**
     * Insecure SSL boolean toggle. Defaults to 'false'.
     */
    insecureSsl?: pulumi.Input<boolean | undefined>;
    /**
     * The shared secret for the webhook
     */
    secret?: pulumi.Input<string | undefined>;
    /**
     * URL of the webhook
     */
    url: pulumi.Input<string>;
}
export interface ProviderAppAuth {
    /**
     * The GitHub App ID.
     */
    id: pulumi.Input<string>;
    /**
     * The GitHub App installation instance ID.
     */
    installationId: pulumi.Input<string>;
    /**
     * The GitHub App PEM file contents.
     */
    pemFile: pulumi.Input<string>;
}
export interface RepositoryCollaboratorsIgnoreTeam {
    /**
     * The GitHub team id or the GitHub team slug.
     */
    teamId: pulumi.Input<string>;
}
export interface RepositoryCollaboratorsTeam {
    /**
     * The permission of the outside collaborators for the repository.
     * Must be one of `pull`, `triage`, `push`, `maintain`, `admin` or the name of an existing [custom repository role](https://docs.github.com/en/enterprise-cloud@latest/organizations/managing-peoples-access-to-your-organization-with-roles/managing-custom-repository-roles-for-an-organization) within the organisation. Defaults to `pull`.
     * Must be `push` for personal repositories. Defaults to `push`.
     */
    permission?: pulumi.Input<string | undefined>;
    /**
     * The GitHub team id or the GitHub team slug.
     */
    teamId: pulumi.Input<string>;
}
export interface RepositoryCollaboratorsUser {
    /**
     * The permission of the outside collaborators for the repository.
     * Must be one of `pull`, `push`, `maintain`, `triage` or `admin` or the name of an existing [custom repository role](https://docs.github.com/en/enterprise-cloud@latest/organizations/managing-peoples-access-to-your-organization-with-roles/managing-custom-repository-roles-for-an-organization) within the organization for organization-owned repositories.
     * Must be `push` for personal repositories. Defaults to `push`.
     */
    permission?: pulumi.Input<string | undefined>;
    /**
     * The user to add to the repository as a collaborator.
     */
    username: pulumi.Input<string>;
}
export interface RepositoryEnvironmentDeploymentBranchPolicy {
    /**
     * Whether only branches that match the specified name patterns can deploy to this environment.
     */
    customBranchPolicies: pulumi.Input<boolean>;
    /**
     * Whether only branches with branch protection rules can deploy to this environment.
     */
    protectedBranches: pulumi.Input<boolean>;
}
export interface RepositoryEnvironmentReviewer {
    /**
     * Up to 6 IDs for teams who may review jobs that reference the environment. Reviewers must have at least read access to the repository. Only one of the required reviewers needs to approve the job for it to proceed.
     */
    teams?: pulumi.Input<pulumi.Input<number>[] | undefined>;
    /**
     * Up to 6 IDs for users who may review jobs that reference the environment. Reviewers must have at least read access to the repository. Only one of the required reviewers needs to approve the job for it to proceed.
     */
    users?: pulumi.Input<pulumi.Input<number>[] | undefined>;
}
export interface RepositoryPages {
    /**
     * The type of GitHub Pages site to build. Can be `legacy` or `workflow`. If you use `legacy` as build type you need to set the option `source`.
     */
    buildType?: pulumi.Input<string | undefined>;
    /**
     * The custom domain for the repository. This can only be set after the repository has been created.
     */
    cname?: pulumi.Input<string | undefined>;
    /**
     * Whether the rendered GitHub Pages site has a custom 404 page.
     */
    custom404?: pulumi.Input<boolean | undefined>;
    /**
     * The absolute URL (including scheme) of the rendered GitHub Pages site e.g. `https://username.github.io`.
     */
    htmlUrl?: pulumi.Input<string | undefined>;
    /**
     * The source branch and directory for the rendered Pages site. See GitHub Pages Source below for details.
     */
    source?: pulumi.Input<inputs.RepositoryPagesSource | undefined>;
    /**
     * The GitHub Pages site's build status e.g. `building` or `built`.
     */
    status?: pulumi.Input<string | undefined>;
    url?: pulumi.Input<string | undefined>;
}
export interface RepositoryPagesSource {
    /**
     * The repository branch used to publish the site's source files (e.g., `main` or `gh-pages`).
     */
    branch: pulumi.Input<string>;
    /**
     * The repository directory from which the site publishes. Defaults to `/`. Can be `/` or `/docs`.
     */
    path?: pulumi.Input<string | undefined>;
}
export interface RepositoryRulesetBypassActor {
    /**
     * (Number) The ID of the actor that can bypass a ruleset. If `actorType` is `Integration`, `actorId` is a GitHub App ID. App ID can be obtained by following instructions from the [Get an App API docs](https://docs.github.com/en/rest/apps/apps?apiVersion=2022-11-28#get-an-app). Some actor types such as `DeployKey` do not have an ID.
     */
    actorId?: pulumi.Input<number | undefined>;
    /**
     * The type of actor that can bypass a ruleset. Can be one of: `RepositoryRole`, `Team`, `Integration`, `OrganizationAdmin`, `DeployKey`.
     */
    actorType: pulumi.Input<string>;
    /**
     * (String) When the specified actor can bypass the ruleset. pullRequest means that an actor can only bypass rules on pull requests. Can be one of: `always`, `pullRequest`, `exempt`.
     *
     * > Note: at the time of writing this, the following actor types correspond to the following actor IDs:
     *
     * - `OrganizationAdmin` > `1`
     * - `RepositoryRole` (This is the actor type, the following are the base repository roles and their associated IDs.)
     */
    bypassMode: pulumi.Input<string>;
}
export interface RepositoryRulesetConditions {
    /**
     * (Block List, Max: 1) Required for `branch` and `tag` targets. Must NOT be set for `push` targets. (see below for nested schema)
     *
     * > **Note:** For `push` targets, do not include `refName` in conditions. Push rulesets operate on file content, not on refs. The `conditions` block is optional for push targets.
     */
    refName: pulumi.Input<inputs.RepositoryRulesetConditionsRefName>;
}
export interface RepositoryRulesetConditionsRefName {
    /**
     * Array of ref names or patterns to exclude. The condition will not pass if any of these patterns match.
     */
    excludes: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Array of ref names or patterns to include. One of these patterns must match for the condition to pass. Also accepts `~DEFAULT_BRANCH` to include the default branch or `~ALL` to include all branches.
     */
    includes: pulumi.Input<pulumi.Input<string>[]>;
}
export interface RepositoryRulesetRules {
    /**
     * (Block List, Max: 1) Parameters to be used for the branchNamePattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. Conflicts with `tagNamePattern` as it only applied to rulesets with target `branch`. (see below for nested schema)
     */
    branchNamePattern?: pulumi.Input<inputs.RepositoryRulesetRulesBranchNamePattern | undefined>;
    /**
     * (Block List, Max: 1) Parameters to be used for the commitAuthorEmailPattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. (see below for nested schema)
     */
    commitAuthorEmailPattern?: pulumi.Input<inputs.RepositoryRulesetRulesCommitAuthorEmailPattern | undefined>;
    /**
     * (Block List, Max: 1) Parameters to be used for the commitMessagePattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. (see below for nested schema)
     */
    commitMessagePattern?: pulumi.Input<inputs.RepositoryRulesetRulesCommitMessagePattern | undefined>;
    /**
     * (Block List, Max: 1) Parameters to be used for the committerEmailPattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. (see below for nested schema)
     */
    committerEmailPattern?: pulumi.Input<inputs.RepositoryRulesetRulesCommitterEmailPattern | undefined>;
    /**
     * (Block List, Max: 1) Automatically request Copilot code review for new pull requests if the author has access to Copilot code review and their premium requests quota has not reached the limit. (see below for nested schema)
     */
    copilotCodeReview?: pulumi.Input<inputs.RepositoryRulesetRulesCopilotCodeReview | undefined>;
    /**
     * (Boolean) Only allow users with bypass permission to create matching refs.
     */
    creation?: pulumi.Input<boolean | undefined>;
    /**
     * (Boolean) Only allow users with bypass permissions to delete matching refs.
     */
    deletion?: pulumi.Input<boolean | undefined>;
    /**
     * (Block List, Max: 1) Prevent commits that include files with specified file extensions from being pushed to the commit graph. This rule only applies to rulesets with target `push`. (see below for nested schema)
     */
    fileExtensionRestriction?: pulumi.Input<inputs.RepositoryRulesetRulesFileExtensionRestriction | undefined>;
    /**
     * (Block List, Max 1) Parameters to be used for the filePathRestriction rule. When enabled restricts access to files within the repository. (See below for nested schema)
     */
    filePathRestriction?: pulumi.Input<inputs.RepositoryRulesetRulesFilePathRestriction | undefined>;
    /**
     * (Integer) The maximum number of characters allowed in file paths.
     */
    maxFilePathLength?: pulumi.Input<inputs.RepositoryRulesetRulesMaxFilePathLength | undefined>;
    /**
     * (Integer) The maximum allowed size, in megabytes (MB), of a file. Valid range is 1-100 MB.
     */
    maxFileSize?: pulumi.Input<inputs.RepositoryRulesetRulesMaxFileSize | undefined>;
    /**
     * (Block List, Max: 1) Merges must be performed via a merge queue. (see below for nested schema)
     */
    mergeQueue?: pulumi.Input<inputs.RepositoryRulesetRulesMergeQueue | undefined>;
    /**
     * (Boolean) Prevent users with push access from force pushing to branches.
     */
    nonFastForward?: pulumi.Input<boolean | undefined>;
    /**
     * (Block List, Max: 1) Require all commits be made to a non-target branch and submitted via a pull request before they can be merged. (see below for nested schema)
     */
    pullRequest?: pulumi.Input<inputs.RepositoryRulesetRulesPullRequest | undefined>;
    /**
     * (Block List, Max: 1) Define which tools must provide code scanning results before the reference is updated. When configured, code scanning must be enabled and have results for both the commit and the reference being updated. Multiple code scanning tools can be specified. (see below for nested schema)
     */
    requiredCodeScanning?: pulumi.Input<inputs.RepositoryRulesetRulesRequiredCodeScanning | undefined>;
    /**
     * (Block List, Max: 1) Choose which environments must be successfully deployed to before branches can be merged into a branch that matches this rule. (see below for nested schema)
     */
    requiredDeployments?: pulumi.Input<inputs.RepositoryRulesetRulesRequiredDeployments | undefined>;
    /**
     * (Boolean) Prevent merge commits from being pushed to matching branches.
     */
    requiredLinearHistory?: pulumi.Input<boolean | undefined>;
    /**
     * (Boolean) Commits pushed to matching branches must have verified signatures.
     */
    requiredSignatures?: pulumi.Input<boolean | undefined>;
    /**
     * (Block List, Max: 1) Choose which status checks must pass before branches can be merged into a branch that matches this rule. When enabled, commits must first be pushed to another branch, then merged or pushed directly to a branch that matches this rule after status checks have passed. (see below for nested schema)
     */
    requiredStatusChecks?: pulumi.Input<inputs.RepositoryRulesetRulesRequiredStatusChecks | undefined>;
    /**
     * (Block List, Max: 1) Parameters to be used for the tagNamePattern rule. This rule only applies to repositories within an enterprise, it cannot be applied to repositories owned by individuals or regular organizations. Conflicts with `branchNamePattern` as it only applied to rulesets with target `tag`. (see below for nested schema)
     */
    tagNamePattern?: pulumi.Input<inputs.RepositoryRulesetRulesTagNamePattern | undefined>;
    /**
     * (Boolean) Only allow users with bypass permission to update matching refs.
     */
    update?: pulumi.Input<boolean | undefined>;
    /**
     * (Boolean) Branch can pull changes from its upstream repository. This is only applicable to forked repositories. Requires `update` to be set to `true`. Note: behaviour is affected by a known bug on the GitHub side which may cause issues when using this parameter.
     */
    updateAllowsFetchAndMerge?: pulumi.Input<boolean | undefined>;
}
export interface RepositoryRulesetRulesBranchNamePattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface RepositoryRulesetRulesCommitAuthorEmailPattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface RepositoryRulesetRulesCommitMessagePattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface RepositoryRulesetRulesCommitterEmailPattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface RepositoryRulesetRulesCopilotCodeReview {
    /**
     * Copilot automatically reviews draft pull requests before they are marked as ready for review. Defaults to `false`.
     */
    reviewDraftPullRequests?: pulumi.Input<boolean | undefined>;
    /**
     * Copilot automatically reviews each new push to the pull request. Defaults to `false`.
     */
    reviewOnPush?: pulumi.Input<boolean | undefined>;
}
export interface RepositoryRulesetRulesFileExtensionRestriction {
    /**
     * A list of file extensions.
     */
    restrictedFileExtensions: pulumi.Input<pulumi.Input<string>[]>;
}
export interface RepositoryRulesetRulesFilePathRestriction {
    /**
     * The file paths that are restricted from being pushed to the commit graph.
     */
    restrictedFilePaths: pulumi.Input<pulumi.Input<string>[]>;
}
export interface RepositoryRulesetRulesMaxFilePathLength {
    /**
     * The maximum allowed length of a file path.
     */
    maxFilePathLength: pulumi.Input<number>;
}
export interface RepositoryRulesetRulesMaxFileSize {
    /**
     * The maximum allowed size of a file in megabytes (MB). Valid range is 1-100 MB.
     */
    maxFileSize: pulumi.Input<number>;
}
export interface RepositoryRulesetRulesMergeQueue {
    /**
     * Maximum time for a required status check to report a conclusion. After this much time has elapsed, checks that have not reported a conclusion will be assumed to have failed. Defaults to `60`.
     */
    checkResponseTimeoutMinutes?: pulumi.Input<number | undefined>;
    /**
     * When set to ALLGREEN, the merge commit created by merge queue for each PR in the group must pass all required checks to merge. When set to HEADGREEN, only the commit at the head of the merge group, i.e. the commit containing changes from all of the PRs in the group, must pass its required checks to merge. Can be one of: ALLGREEN, HEADGREEN. Defaults to `ALLGREEN`.
     */
    groupingStrategy?: pulumi.Input<string | undefined>;
    /**
     * Limit the number of queued pull requests requesting checks and workflow runs at the same time. Defaults to `5`.
     */
    maxEntriesToBuild?: pulumi.Input<number | undefined>;
    /**
     * The maximum number of PRs that will be merged together in a group. Defaults to `5`.
     */
    maxEntriesToMerge?: pulumi.Input<number | undefined>;
    /**
     * Method to use when merging changes from queued pull requests. Can be one of: MERGE, SQUASH, REBASE. Defaults to `MERGE`.
     */
    mergeMethod?: pulumi.Input<string | undefined>;
    /**
     * The minimum number of PRs that will be merged together in a group. Defaults to `1`.
     */
    minEntriesToMerge?: pulumi.Input<number | undefined>;
    /**
     * The time merge queue should wait after the first PR is added to the queue for the minimum group size to be met. After this time has elapsed, the minimum group size will be ignored and a smaller group will be merged. Defaults to `5`.
     */
    minEntriesToMergeWaitMinutes?: pulumi.Input<number | undefined>;
}
export interface RepositoryRulesetRulesPullRequest {
    /**
     * Array of allowed merge methods. Allowed values include `merge`, `squash`, and `rebase`. At least one option must be enabled.
     */
    allowedMergeMethods?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * New, reviewable commits pushed will dismiss previous pull request review approvals. Defaults to `false`.
     */
    dismissStaleReviewsOnPush?: pulumi.Input<boolean | undefined>;
    /**
     * Require an approving review in pull requests that modify files that have a designated code owner. Defaults to `false`.
     */
    requireCodeOwnerReview?: pulumi.Input<boolean | undefined>;
    /**
     * Whether the most recent reviewable push must be approved by someone other than the person who pushed it. Defaults to `false`.
     */
    requireLastPushApproval?: pulumi.Input<boolean | undefined>;
    /**
     * The number of approving reviews that are required before a pull request can be merged. Defaults to `0`.
     */
    requiredApprovingReviewCount?: pulumi.Input<number | undefined>;
    /**
     * All conversations on code must be resolved before a pull request can be merged. Defaults to `false`.
     */
    requiredReviewThreadResolution?: pulumi.Input<boolean | undefined>;
    /**
     * Require specific reviewers to approve pull requests targeting matching branches. Note: This feature is in beta and subject to change.
     */
    requiredReviewers?: pulumi.Input<pulumi.Input<inputs.RepositoryRulesetRulesPullRequestRequiredReviewer>[] | undefined>;
}
export interface RepositoryRulesetRulesPullRequestRequiredReviewer {
    /**
     * File patterns (fnmatch syntax) that this reviewer must approve.
     */
    filePatterns: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Minimum number of approvals required from this reviewer. Set to 0 to make approval optional.
     */
    minimumApprovals: pulumi.Input<number>;
    /**
     * The reviewer that must review matching files.
     */
    reviewer: pulumi.Input<inputs.RepositoryRulesetRulesPullRequestRequiredReviewerReviewer>;
}
export interface RepositoryRulesetRulesPullRequestRequiredReviewerReviewer {
    /**
     * The ID of the reviewer that must review.
     */
    id: pulumi.Input<number>;
    /**
     * The type of reviewer. Currently only `Team` is supported.
     */
    type: pulumi.Input<string>;
}
export interface RepositoryRulesetRulesRequiredCodeScanning {
    /**
     * Tools that must provide code scanning results for this rule to pass.
     */
    requiredCodeScanningTools: pulumi.Input<pulumi.Input<inputs.RepositoryRulesetRulesRequiredCodeScanningRequiredCodeScanningTool>[]>;
}
export interface RepositoryRulesetRulesRequiredCodeScanningRequiredCodeScanningTool {
    /**
     * The severity level at which code scanning results that raise alerts block a reference update. Can be one of: `none`, `errors`, `errorsAndWarnings`, `all`.
     */
    alertsThreshold: pulumi.Input<string>;
    /**
     * The severity level at which code scanning results that raise security alerts block a reference update. Can be one of: `none`, `critical`, `highOrHigher`, `mediumOrHigher`, `all`.
     */
    securityAlertsThreshold: pulumi.Input<string>;
    /**
     * The name of a code scanning tool
     */
    tool: pulumi.Input<string>;
}
export interface RepositoryRulesetRulesRequiredDeployments {
    /**
     * The environments that must be successfully deployed to before branches can be merged.
     */
    requiredDeploymentEnvironments: pulumi.Input<pulumi.Input<string>[]>;
}
export interface RepositoryRulesetRulesRequiredStatusChecks {
    /**
     * Allow repositories and branches to be created if a check would otherwise prohibit it.
     */
    doNotEnforceOnCreate?: pulumi.Input<boolean | undefined>;
    /**
     * Status checks that are required. Several can be defined.
     */
    requiredChecks: pulumi.Input<pulumi.Input<inputs.RepositoryRulesetRulesRequiredStatusChecksRequiredCheck>[]>;
    /**
     * Whether pull requests targeting a matching branch must be tested with the latest code. This setting will not take effect unless at least one status check is enabled. Defaults to `false`.
     */
    strictRequiredStatusChecksPolicy?: pulumi.Input<boolean | undefined>;
}
export interface RepositoryRulesetRulesRequiredStatusChecksRequiredCheck {
    /**
     * The status check context name that must be present on the commit.
     */
    context: pulumi.Input<string>;
    /**
     * The optional integration ID that this status check must originate from.
     */
    integrationId?: pulumi.Input<number | undefined>;
}
export interface RepositoryRulesetRulesTagNamePattern {
    /**
     * (String) The name of the ruleset.
     */
    name?: pulumi.Input<string | undefined>;
    /**
     * If true, the rule will fail if the pattern matches.
     */
    negate?: pulumi.Input<boolean | undefined>;
    /**
     * The operator to use for matching. Can be one of: `startsWith`, `endsWith`, `contains`, `regex`.
     */
    operator: pulumi.Input<string>;
    /**
     * The pattern to match with.
     */
    pattern: pulumi.Input<string>;
}
export interface RepositorySecurityAndAnalysis {
    /**
     * The advanced security configuration for the repository. See Advanced Security Configuration below for details. If a repository's visibility is `public`, advanced security is always enabled and cannot be changed, so this setting cannot be supplied.
     */
    advancedSecurity?: pulumi.Input<inputs.RepositorySecurityAndAnalysisAdvancedSecurity | undefined>;
    /**
     * The code security configuration for the repository. See Code Security below for details.
     */
    codeSecurity?: pulumi.Input<inputs.RepositorySecurityAndAnalysisCodeSecurity | undefined>;
    /**
     * The secret scanning configuration for the repository. See Secret Scanning Configuration below for details.
     */
    secretScanning?: pulumi.Input<inputs.RepositorySecurityAndAnalysisSecretScanning | undefined>;
    /**
     * The secret scanning ai detection configuration for the repository. See Secret Scanning AI Detection Configuration below for details.
     */
    secretScanningAiDetection?: pulumi.Input<inputs.RepositorySecurityAndAnalysisSecretScanningAiDetection | undefined>;
    /**
     * The secret scanning non-provider patterns configuration for this repository. See Secret Scanning Non-Provider Patterns Configuration below for more details.
     */
    secretScanningNonProviderPatterns?: pulumi.Input<inputs.RepositorySecurityAndAnalysisSecretScanningNonProviderPatterns | undefined>;
    /**
     * The secret scanning push protection configuration for the repository. See Secret Scanning Push Protection Configuration below for details.
     */
    secretScanningPushProtection?: pulumi.Input<inputs.RepositorySecurityAndAnalysisSecretScanningPushProtection | undefined>;
}
export interface RepositorySecurityAndAnalysisAdvancedSecurity {
    /**
     * Set to `enabled` to enable advanced security features on the repository. Can be `enabled` or `disabled`.
     */
    status: pulumi.Input<string>;
}
export interface RepositorySecurityAndAnalysisCodeSecurity {
    /**
     * The GitHub Pages site's build status e.g. `building` or `built`.
     */
    status: pulumi.Input<string>;
}
export interface RepositorySecurityAndAnalysisSecretScanning {
    /**
     * The GitHub Pages site's build status e.g. `building` or `built`.
     */
    status: pulumi.Input<string>;
}
export interface RepositorySecurityAndAnalysisSecretScanningAiDetection {
    /**
     * Set to `enabled` to enable secret scanning AI detection on the repository. Can be `enabled` or `disabled`. If set to `enabled`, the repository's visibility must be `public`, `security_and_analysis[0].advanced_security[0].status` must also be set to `enabled`, or your Organization must have split licensing for Advanced security.
     */
    status: pulumi.Input<string>;
}
export interface RepositorySecurityAndAnalysisSecretScanningNonProviderPatterns {
    /**
     * The GitHub Pages site's build status e.g. `building` or `built`.
     */
    status: pulumi.Input<string>;
}
export interface RepositorySecurityAndAnalysisSecretScanningPushProtection {
    /**
     * The GitHub Pages site's build status e.g. `building` or `built`.
     */
    status: pulumi.Input<string>;
}
export interface RepositoryTemplate {
    /**
     * Whether the new repository should include all the branches from the template repository (defaults to false, which includes only the default branch from the template).
     *
     * > **Note on `internal` visibility with templates**: When creating a repository from a template with `visibility = "internal"`, the provider uses a two-step process due to GitHub API limitations. The template creation API only supports a `private` boolean parameter. Therefore, repositories with `visibility = "internal"` are initially created as private and then immediately updated to internal visibility. This ensures internal repositories are never exposed publicly during creation.
     */
    includeAllBranches?: pulumi.Input<boolean | undefined>;
    /**
     * The GitHub organization or user the template repository is owned by.
     */
    owner: pulumi.Input<string>;
    /**
     * The name of the template repository.
     */
    repository: pulumi.Input<string>;
}
export interface RepositoryWebhookConfiguration {
    /**
     * The content type for the payload. Valid values are either `form` or `json`.
     */
    contentType?: pulumi.Input<string | undefined>;
    /**
     * Insecure SSL boolean toggle. Defaults to `false`.
     */
    insecureSsl?: pulumi.Input<boolean | undefined>;
    /**
     * The shared secret for the webhook. [See API documentation](https://developer.github.com/v3/repos/hooks/#create-a-hook).
     */
    secret?: pulumi.Input<string | undefined>;
    /**
     * The URL of the webhook.
     */
    url: pulumi.Input<string>;
}
export interface TeamMembersMember {
    /**
     * The role of the user within the team.
     * Must be one of `member` or `maintainer`. Defaults to `member`.
     */
    role?: pulumi.Input<string | undefined>;
    /**
     * The user to add to the team.
     */
    username: pulumi.Input<string>;
}
export interface TeamSettingsReviewRequestDelegation {
    /**
     * The algorithm to use when assigning pull requests to team members. Supported values are ROUND_ROBIN and LOAD_BALANCE.
     */
    algorithm?: pulumi.Input<string | undefined>;
    /**
     * The number of team members to assign to a pull request.
     */
    memberCount?: pulumi.Input<number | undefined>;
    /**
     * Whether to notify the entire team when at least one member is also assigned to the pull request. Can be set independently of `reviewRequestDelegation`. Default value is `false`.
     *
     * @deprecated Use the top-level notify attribute instead.
     */
    notify?: pulumi.Input<boolean | undefined>;
}
export interface TeamSyncGroupMappingGroup {
    /**
     * The description of the IdP group.
     */
    groupDescription: pulumi.Input<string>;
    /**
     * The ID of the IdP group.
     */
    groupId: pulumi.Input<string>;
    /**
     * The name of the IdP group.
     */
    groupName: pulumi.Input<string>;
}
export declare namespace config {
}
//# sourceMappingURL=input.d.ts.map