Release identity
SHA-256 of the pack file bytes: 05ce2a287ab9387e6a0ddc848bcbbd3b7be18bb58a1ef0a83b82b7f4c0d30579
Distributable: digest matches the release manifest. The binary carries a digest-bound manifest of the distributable library; a pack whose bytes differ from its manifest entry — endpoint, tier, allowlist, or credential edited, with provider, version, and review block preserved — fails the digest check, loses distributability, and renders MODIFIED rather than as the shipped reviewed artifact. Review state and artifact status are different facts: the first is a documentation-review declaration, the second is the identity of the exact bytes.
Capabilities (5)
github.repos.read v1.0.0R0
- Action
- read
- Endpoint
GET https://api.github.com/orgs/ORG/repos- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-github-app-token- Data class
- internal
List the organization's repositories.
github.issue.create v1.0.0R2
- Action
- create
- Endpoint
POST https://api.github.com/repos/OWNER/REPO/issues- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-github-app-token- Data class
- internal
Open an issue in one repository.
github.pull_request.merge v1.0.0R3
- Action
- deploy
- Endpoint
PUT https://api.github.com/repos/OWNER/REPO/pulls/NUMBER/merge- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-github-app-token- Data class
- internal
Merge a pull request, which publishes a change to a live branch; registered with the deploy action at the R3 floor rather than as an ordinary update, because deploy is one of the IRREVERSIBLE ACTIONS (delete, send, pay, deploy, approve, share and transfer).
github.repo.delete v1.0.0R3
- Action
- delete
- Endpoint
DELETE https://api.github.com/repos/OWNER/REPO- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-github-app-token- Data class
- internal
Delete a repository. Delete is one of the IRREVERSIBLE ACTIONS (delete, send, pay, deploy, approve, share and transfer); policy can raise the tier above the R3 floor.
github.repo.transfer v1.0.0R3
- Action
- transfer
- Endpoint
POST https://api.github.com/repos/OWNER/REPO/transfer- Connector
- http
- Custody
- customer_vault
- Credential ref
secret-ref-github-app-token- Data class
- internal
Transfer a repository to another owner. Ownership leaving the organisation cannot be reliably undone, and transfer is one of the IRREVERSIBLE ACTIONS, which is why it carries the R3 floor.
Credential reference
The pack names a reference, never a secret. Installing a pack registers capabilities and makes them governable; registration is not connectivity. The credential is created at the provider and held in the client's own secret manager under the reference the pack names, and deployment testing is still required to show the credential path works and cannot be bypassed.
- Reference
secret-ref-github-app-token- Custody
- customer_vault
- Injection
- header (Authorization)
A GitHub App installation token (preferred: short-lived and repository-scoped) or a fine-grained personal access token, held in the client's own secret manager. The stored material must be the complete Authorization header value (scheme included). Installation tokens expire, so the reference must be refreshed by the deployment's custody job; an expired reference fails closed.
Resources
github-org(api, internal):https://api.github.com/orgs/ORG
Pack notes and exclusions
ORG, OWNER, REPO and NUMBER in the endpoint paths are placeholders: replace them with the organization and repository this capability is bound to before enabling. The egress allowlist stays api.github.com.
Review record
Review completed: 2026-09-20 · Reviewer: aaes-eng (an opaque id that resolves internally to the responsible reviewer)
- https://docs.github.com/en/rest/repos/repos (retrieved 2026-09-20)
- https://docs.github.com/en/rest/issues/issues (retrieved 2026-09-20)
- https://docs.github.com/en/rest/pulls/pulls (retrieved 2026-09-20)
A pack review is not a vendor or examiner attestation. A retrieval date says when a source page was read; it does not by itself establish what the page said then. No pack is vendor-endorsed, and none has been connectivity-tested against a live vendor tenant.