Required permissions
- Contents (read): Needed to read repository files during ingestion and evaluation.
- Contents (write): Needed only if auto-merge is enabled, so Darkplane can merge qualifying pull requests.
- Pull requests (write): Needed to post approvals and review comments.
- Checks (write): Needed to publish evaluation results as check runs.
If you change the app’s permissions after installation, GitHub requires the installation to re-consent before the new permissions take effect.
Installation scope
You can install Darkplane on all repositories or a selected subset. Start with a small set of low-risk repositories and expand as your readiness scores improve.Troubleshooting
- “Resource not accessible by integration”: The app is missing a permission for the action it attempted. Check the installation’s granted permissions before debugging code.
- No data after installation: Verify that
contents:readwas granted and that the installation consented to it.