---
title: "Get default workflow permissions for a repository"
method: GET
path: "/repos/{owner}/{repo}/actions/permissions/workflow"
tags: ["actions"]
---

# Get default workflow permissions for a repository

`GET /repos/{owner}/{repo}/actions/permissions/workflow`

Gets the default workflow permissions granted to the `GITHUB_TOKEN` when running workflows in a repository,
as well as if GitHub Actions can submit approving pull request reviews.
For more information, see "[Setting the permissions of the GITHUB_TOKEN for your repository](https://docs.github.com/enterprise-server@3.7/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository)."

You must authenticate using an access token with the `repo` scope to use this endpoint. GitHub Apps must have the repository `administration` permission to use this API.

## Path parameters

- `owner` string, required
- `repo` string, required

## Response `200`

Response

- ActionsGetDefaultWorkflowPermissions
  - `default_workflow_permissions` 'read' | 'write', required — The default workflow permissions granted to the GITHUB_TOKEN when running workflows.
  - `can_approve_pull_request_reviews` boolean, required — Whether GitHub Actions can approve pull requests. Enabling this can be a security risk.

---

[API](https://skmtc.net/github/apis/github-v3-rest-api-6.md) · [All operations](https://skmtc.net/github/apis/github-v3-rest-api-6/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/github-v3-rest-api-6/versions/15db3fa0759b/schema)