GitHub Apps for Enterprise Generally Available in Version 3.24

GitHub Apps for enterprise installations are generally available. You can now use them instead of classic personal access tokens for automation across enterprises and organizations.

New and expanded API permissions cover governance, security, and administration. For governance, apps manage enterprise-level repository policies, rulesets, and read delegated bypass requests. Security permissions configure two-factor authentication, verify domains, manage IP allowlists, and control enterprise access restrictions. Administrative permissions update enterprise profiles and manage member privileges and repository access settings.

The enterprise organization and repository policies permission is read/write. It handles private repository forking, default permissions, visibility changes, creation and deletion, issue deletion, collaborator invitations, deploy keys, protected branches, dependency insights, and projects.

The bypass requests permission is read-only for push-rule and policy bypasses. The enterprise settings permission is read/write and is required before an app can reach organization and repository policies.

Two-factor authentication permissions let apps read fields and update requirements and disallowed authentication methods. Verifiable domains, IP allowlists, access restrictions, and repository rulesets permissions handle their respective objects and mutations.

The enterprise people permission now covers reading EnterpriseRepositoryInfo and outside collaborators, plus adding an app to an organization as an owner or member. The enterprise billing permission allows updating Marketplace member purchasing settings.

These updates arrive in GitHub Enterprise Server 3.24.