Modify "Approval for running fork pull request workflows from contributors" through the API

[zerok]

Select Topic Area

Question

Body

Hi 🙂

From what I can tell by looking at the REST API docs there currently seems to be no way to configure Actions inside a repository to require an explicit approval before running ("Require approval for all external contributors").

So far I've checked the Actions, Repositories, and Forks section. Is there perhaps something on the horizon for this? I'd love to be able to set this via Terraform 🙂

[iamsagnik]

No REST API/Terraform support: As of now, GitHub's REST API does not expose the "Require approval for workflow runs from public forks" setting. This setting is only configurable via the GitHub UI (Organization Settings → Actions → General → "Approval for running fork pull request workflows").

Enterprise policy override: If your organization belongs to an enterprise, the approval policy might be enforced at the enterprise level, overriding repository settings. Enterprise admins configure this under Enterprise Policies → Actions → "Fork pull request workflows from outside collaborators".

Workaround: Until API support is added: Manually enable approval in the GitHub UI per repository/organization. Use Terraform to manage other Actions-related settings (e.g., runner permissions, allowed actions)