[FEAT]: Allow Defining Actions Access Settings on a Repository

[cwthrivent]

Describe the need

In a repository, you can go to Settings -> Actions -> General and then there is a section for controlling the visibility/scope of the repository with respect to GitHub Actions. Here is a screenshot:

Currently, there does not seem to be a way to configure this via this Terraform provider (I apologize in advance if there is).

I found in the GitHub documentation that there is support for some API calls to fetch and set this value:

• GET - https://docs.github.com/en/enterprise-cloud@latest/rest/actions/permissions?apiVersion=2022-11-28#get-the-level-of-access-for-workflows-outside-of-the-repository
• PUT - https://docs.github.com/en/enterprise-cloud@latest/rest/actions/permissions?apiVersion=2022-11-28#set-the-level-of-access-for-workflows-outside-of-the-repository

These are documented in the context of the GitHub Enterprise API, so I hope they are not out of scope for this provider. Let me know if they are.

SDK Version

No response

API Version

GitHub REST API 2022-11-28

Relevant log output

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[kfcampbell]

Ooh, you're right! This would be a great feature to implement in the provider. I've added the "Status: Up for grabs" label and I'd be happy to review PRs for this behavior.

[wwsean08]

I'm curious, I feel like it would make sense for this to be added to the github_actions_repository_permissions, does that make sense to you or should it be it's own resource? This would be modifying settings on the same page which is why I think that it should be added to that resource, but it is slightly different in terms of settings, essentially what repos can reference this as opposed to the are actions allowed and what actions can this repo access.

Just wanted to check before I open a PR :)

Edit: also digging in a bit deeper, it looks like an update to go-github will be required before this can be done, as I'm not seeing any function for manipulating these settings the library.

[cwthrivent]

@wwsean08 Thanks for engaging on this. I am not very familiar with the workflow between these repositories - does a separate issue need to be created wherever the "go-github" source code exists?

[kfcampbell]

@cwthrivent the repository you're looking for is google/go-github! That's the module we use to interact with GitHub's REST API.

[s4nji]

Edit: also digging in a bit deeper, it looks like an update to go-github will be required before this can be done, as I'm not seeing any function for manipulating these settings the library.

This was added in the recent release (v48.2.0) via google/go-github#2578 so it should be ready to be added into terraform-provider-github

[kfcampbell]

The project has been updated to use v48.2.0 of google/go-github, so this feature is now unblocked!

[wwsean08]

Gotcha, I must have been looking at an older version of the source code when I was searching for the comment with the documentation URL. I can try taking a stab at this on Friday, but curious about your opinion on my proposition of adding this to the github_actions_repository_permissions resource @kfcampbell, the things modified by that resource are on the same page as what this would be modifying in the settings UI, otherwise I can learn how to create a new resource from scratch and this may take a bit longer (assuming someone doesn't beat me to it)

[kfcampbell]

I'm 👍 on keeping the new functionality in the existing github_actions_repository_permissions resource!