[Schema Inaccuracy] repository variables permission missing from app-permissions

Open Beginner friendly

#5,437 opened on Oct 8, 2025 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 2/5
Estimated time: 1-3 hours
Newbie friendliness: 65/100

Issue type: Bug
Clarity: Clearly specified
Activity status: Stale
Tech stack: openapi
Domain: api

Research direction

Start by locating the OpenAPI component schema named #/components/schemas/app-permissions and compare its declared properties with the expected variables permission. Read the referenced create-github-app-token issue for context. Done means variables accepts read and write in the schema and the API description remains valid.

Written by the indexing model from the issue text.

Description

feature

Schema Inaccuracy

#/components/schemas/app-permissions
variables parameter is missing.

Expected

variables: write|read should be a valid parameter

Reproduction Steps

n/a

Created due to:
https://github.com/actions/create-github-app-token/issues/231

Dominant language: No language data
Stars: 1.6k
Forks: 342
Avg merge: 3h 33m
Merged PRs (30d): 51

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

More from github/rest-api-description

[Schema Inaccuracy] Missing Link header from org/security-advisories response description Open

feature

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

github/rest-api-description#7201 · Opened Sep 15, 2026
Runner deprecations: enterprise scope is in the changelog and the 404 handler but not in the description Open

feature

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

github/rest-api-description#7163 · Opened Sep 9, 2026
Runner deprecations: registration_deprecates_at is declared on the response but never returned Open

feature

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

github/rest-api-description#7162 · Opened Sep 9, 2026
configure-pages API endpoint yields anchor that doesn't exist in docs Open

feature

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

github/rest-api-description#7135 · Opened Sep 4, 2026
Document RepositoryRole actor_id values for ruleset bypass_actors — critical security feature, currently undocumented Open

feature

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

github/rest-api-description#7111 · 1 comment · Opened Sep 1, 2026

All issues in github/rest-api-description

Similar issues

[Bug] NULL pointer dereference in llm_running_callback (NGZA-AX-LLM #3) Open

Difficulty 1/5 Under an hour Newbie friendliness 90/100

AXERA-TECH/ax-llm#77 · Opened Sep 22, 2026
MCP client has no httpx timeout, so the event stream fails after 5 seconds Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

Azure/azure-functions-agents-runtime#228 · Opened Sep 21, 2026
feat(mcp): friendlier error when `run_cloud_sync` is called on a disabled connection Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

airbytehq/PyAirbyte#1205 · Opened Sep 21, 2026
🧹 Extract DRA resource collection and charge calculation helpers Open

kind/cleanup

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

kubernetes-sigs/kueue#15937 · Opened Sep 21, 2026
Custom provider credential is written as `PROVIDER_API_KEY` (apiserver) but the AgentRun controller injects only allowlisted keys, so every custom provider fails with HTTP 401 Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

sympozium-ai/sympozium#627 · Opened Sep 21, 2026

More Backend & API Design issues

A short digest of beginner-friendly GitHub issues.