I’m looking for a list of permissions to GitHub Cloud that I need to grant SonarCloud to enable it to perform its many services on the private repos in our organization. I’m looking for a list like the one Codacy provides: Which permissions does Codacy need from my account? - Codacy docs …

Hi, Welcome to the community! I’ve edited your title from ‘Codacy’ to ‘SonarCloud’ :slight_smile: Maybe this thread will help: [image] What permissions does SonarCloud requires from GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SonarCloud Can you tell me what permissions a…

Hi. (Wow, I can’t believe I messed up the title.) That helps. However, I’m more interested in the permissions that need to be granted via GitHub App (or OAuth App). A lot of services will require an OAuth grant of read:write repo permissions, which I cannot accept. To avoid surprising dialogs lat…

Hi, The token is absolutely associated to the account that generated it. So if you’re the one logged into the interface, it’ll be your account. For SonarCloud, I just deleted the app on my personal GH account and started stepping through it again to refresh myself. Here’s what I’m seeing: [Selec…

Thanks for confirm on SONAR_TOKEN. And for list of GitHub permissions needed for personal account integration, which I’ve performed as well. How can I confirm that an organization on GitHub does not need to grant write permission to its private repo code in order to import a private repo into Sona…

Hi, [image] Joe Bowbeer: How can I confirm that an organization on GitHub does not need to grant write permission to its private repo code in order to import a private repo into SonarCloud? I’m confused. The screenshot I gave you above is literally the interface you get when you set this up. …

Good to know! Many coverage services have separate permissions involved when authorizing for private repos in an org vs a personal account. This is usually attributed to the limited OAuth scopes defined by GitHub.

Which permissions does SonarCloud need from my account?

SonarQube Cloud

ganncamp (G Ann Campbell) May 3, 2022, 7:18pm 2

Hi,

Welcome to the community!

I’ve edited your title from ‘Codacy’ to ‘SonarCloud’

Maybe this thread will help:

Ann

Topic		Replies	Views
What permissions does SonarCloud requires from GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SonarQube Cloud docs-gap , docs-gap-confirmed , sonarqube-cloud	9	3923	June 14, 2022
Minimal Git permissions to read all repos? SonarQube Cloud	4	685	February 22, 2022
Why does GitHub SSO require so many permissions? SonarQube Cloud github , authentication , sso , sonarqube-cloud	2	622	August 9, 2022
GitHub authentication on SonarCloud: slight change Sonar Updates github , sonarqube-cloud	1	1899	March 11, 2019
What are the security implications of letting SonarCloud act on my behalf after signing up? SonarQube Cloud	2	633	November 3, 2022

Which permissions does SonarCloud need from my account?

Related topics