API access to GitHub container settings for action access

[electricgull]

Select Topic Area

Question

Body

Is there documentation for the API that will allow me to add repositories access a package container? I see the following in the page source code, but can't find any documentation:

/orgs/{org}/packages/container/{package_name}/settings/add_actions_access

[jge162]

link to the GitHub Package Registry API documentation is the following:

gitHub documentation

look for about-the-github-packages-api

This documentation includes information on how to use the API to manage packages in your GitHub repository, including the endpoint you've mentioned, /orgs/{org}/packages/container/{package_name}/settings/add_actions_access, which is used to give access to specific GitHub Actions workflows to a package

[jge162]

you can use the API to manage other aspects of packages in your GitHub repository such as listing, creating, and deleting packages, and managing package access permissions. Sorry for confusion.

[electricgull]

I need an API to manage Actions access because I have 300 repos to add. Is there a way to mass add them? It seems like it will only allow me to add them 1 at a time. I tried doing a comma separated and new line separated list and it didn't work.

[jge162]

I apologize, but I do not see any information in the GitHub API documentation about a way to mass add Actions access to multiple repositories.

You can try to use Github's API to automate the process by creating a script that will loop through all your repositories and add the access to each one. You can try to use the following API endpoint to add access to a repository, I only suggesting it. Not sure if it will 100% accomplish your goal.

POST /repos/{owner}/{repo}/actions/runners/{runner_id}/access

API endpoint documentation

[jge162]

Remember you could be rate limited by Github API. If you have 300 to do.

[jurgenweber]

@jge162 You seem to be talking about the solution, but it isn't in the documentation. If I try to hit

gh api -X POST /orgs/{org}/packages/container/{package_name}/settings/add_actions_access
{
  "message": "Not Found",
  "documentation_url": "https://docs.github.com/enterprise-server@3.12/rest"
}
gh: Not Found (HTTP 404)

[RobinHoutevelts]

@electricgull did you manage to find a way to programmatically manage which repositories's Workflows have access to a certain package?

On https://github.com/<org>/<repo>/pkgs/container/<image-name>/settings I can also do them 1-by-1 (actually in bulk, but still tedious), we are migrating from GitLab and also have to do a lot of projects.

I noticed this in my Devtools network tab:

curl -X POST https://github.com/orgs/<org>/packages/container/<package_name>/settings/bulk_add_actions_access \
  --data-raw 'authenticity_token=<token>&selected_ids=616984254'

which I could (ab)use but was wondering if you had found a different solution.

[jurgenweber]

I am fine with adding it one by one, but I can not get it to work.. I keep getting a 404 but watching the browser conole, it is doing exactly this

[jurgenweber]

Ok, I have been able to get it to return a 0(bash return) and a 302 from curl, but it doesn't turn up in the UI?!

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[mjfpalmer]

+1 for this to be added to the API. I have 20+ repos needing access to 60+ packages. That's 1200+ UI operations at least.

[jurgenweber]

Did anyone find a solution?

[iploooox]

+1 we have 100 repositories with 50 nugget packages, there is no way anyone will maintain this manually. Currently the best option is to use your own / bot PAM token that has access instead of the one provided by github.

[jurgenweber]

Did anyone find a solution?