Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added docs/public/images/org-owned_dark.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/public/images/org-owned_light.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/public/images/user-owned_dark.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/public/images/user-owned_light.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/public/videos/create-workflow-on-github.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/public/videos/install-and-add-workflow-in-cli.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/public/videos/user-vs-org-ownership.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
31 changes: 31 additions & 0 deletions docs/src/content/docs/reference/tokens.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,34 @@ sidebar:

GitHub Agentic Workflows authenticate using multiple tokens depending on the operation. This reference explains which token to use, when it's required, and how precedence works across different operations.

## User vs. Org Ownership

Ownership affects token requirements for repositories and Projects (v2). If the owner is your personal username, it is user-owned. If the owner is an organization, it is org-owned and managed with shared roles and access controls.

To confirm ownership, check the owner name and avatar at the top of the page or in the URL (`github.com/owner-name/...`). Clicking the owner takes you to a personal profile or an organization page, which confirms it instantly.

<div style="display: grid; grid-template-columns: repeat(auto-fit, minmax(min(100%, 400px), 1fr)); gap: 1.5rem; margin: 2rem 0;">
<div class="gh-aw-video-wrapper">
<picture>
<source media="(prefers-color-scheme: dark)" srcset="/gh-aw/images/user-owned_dark.png">
<img alt="User-owned repository example" src="/gh-aw/images/user-owned_light.png">
</picture>
<div class="gh-aw-video-caption" role="note">
User-owned repository: avatar shows a personal profile icon, URL includes username
</div>
</div>

<div class="gh-aw-video-wrapper">
<picture>
<source media="(prefers-color-scheme: dark)" srcset="/gh-aw/images/org-owned_dark.png">
<img alt="Organization-owned repository example" src="/gh-aw/images/org-owned_light.png">
</picture>
<div class="gh-aw-video-caption" role="note">
Organization-owned repository: avatar shows organization icon, URL includes org name
</div>
</div>
</div>

## Quick start: tokens you actually configure

GitHub Actions always provides `GITHUB_TOKEN` for you automatically.
Expand Down Expand Up @@ -67,6 +95,9 @@ jobs:

- For very sensitive tokens, prefer GitHub Environments or organization-level secrets with required reviewers so only trusted workflows can use them.

### Distinguish user-owned vs organization-owned repos and Projects

Token requirements often depend on who owns the repository or Project. See [User vs. Org Ownership](#user-vs-org-ownership) for how to tell whether a repo or Project is user-owned or organization-owned.
## Token Overview

| Token | Type | Purpose | User Configurable |
Expand Down