chore(sync-github): add new org scopes

egibs · egibs · commit 1079c8fa4856 · 2026-04-13T17:19:59.000-05:00
Add octo-sts scopes to manage roles via IAC.
diff --git a/.github/chainguard/sync-github.sts.yaml b/.github/chainguard/sync-github.sts.yaml
@@ -13,4 +13,6 @@ permissions:
   members: write # to add/remove GitHub members
   metadata: read # to read metadata about the org
 
+  organization_custom_org_roles: write # required for managing custom organization roles
+  organization_custom_roles: write # required for managing custom repository roles
 repositories: [] # Act over all of the repos in the org.
diff --git a/.github/chainguard/verify-github.sts.yaml b/.github/chainguard/verify-github.sts.yaml
@@ -13,4 +13,6 @@ permissions:
   members: read # to add/remove GitHub members
   metadata: read # to read metadata about the org
 
+  organization_custom_org_roles: read # required for reading custom organization roles
+  organization_custom_roles: read # required for reading custom repository roles
 repositories: [] # Act over all of the repos in the org.
