From 86eaa1e716d6cea891a346d783c4b821b427ce9a Mon Sep 17 00:00:00 2001
From: Alex Sohn <alexsohn1126@gmail.com>
Date: Fri, 24 Jul 2026 16:22:05 -0400
Subject: [PATCH] docs(github): mirror all app permissions and events to GHE
 setup

The GitHub Enterprise section describes a GitHub App that customers
create themselves, and its permissions and events had drifted from the
Sentry GitHub App used for github.com installs (verified via
`gh api /apps/sentry`).

Mirror the full set so GitHub Enterprise installs support the same
features:

- Fix Commit Statuses, which was documented as "No Access" but requires
  read & write
- Add the Actions, Checks, Code Quality, Code scanning alerts, Metadata,
  Webhooks, and Email addresses permissions
- Add the check_run, check_suite, pull_request_review, and
  pull_request_review_comment events
- Note that this app is customer-owned and should be kept in sync with
  the permissions documented for the github.com app

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../source-code-mgmt/github/index.mdx         | 52 ++++++++++++++++++-
 1 file changed, 51 insertions(+), 1 deletion(-)

diff --git a/docs/integrations/source-code-mgmt/github/index.mdx b/docs/integrations/source-code-mgmt/github/index.mdx
index a78f4a5b4907e..8ebf1b271b9a5 100644
--- a/docs/integrations/source-code-mgmt/github/index.mdx
+++ b/docs/integrations/source-code-mgmt/github/index.mdx
@@ -100,6 +100,12 @@ Occasionally, Sentry will request additional permissions to your GitHub account
 
 ### Register new GitHub App
 
+<Alert>
+
+Because you create and own this GitHub App yourself, you're responsible for keeping its configuration current. The permissions and events below mirror those of the [Sentry GitHub App](#github-permissions) used for `github.com` installations, so that GitHub Enterprise installations support the same features. When Sentry adds a permission or event to the GitHub App, update your GitHub Enterprise App to match, otherwise newer features may not work.
+
+</Alert>
+
 1. First, you'll need to generate a webhook secret. For example, in terminal:
 
    ```
@@ -142,13 +148,29 @@ Occasionally, Sentry will request additional permissions to your GitHub account
          <th>Webhook secret </th>
          <td>`Input your secret from the previous step` </td>
        </tr>
+       <tr>
+         <th>Actions </th>
+         <td>Read & Write </td>
+       </tr>
        <tr>
          <th>Repository Administration </th>
          <td>Read-only </td>
        </tr>
+       <tr>
+         <th>Checks </th>
+         <td>Read & Write </td>
+       </tr>
+       <tr>
+         <th>Code Quality </th>
+         <td>Read-only </td>
+       </tr>
+       <tr>
+         <th>Code scanning alerts </th>
+         <td>Read-only </td>
+       </tr>
        <tr>
          <th>Commit Statuses </th>
-         <td>No Access </td>
+         <td>Read & Write </td>
        </tr>
        <tr>
          <th>Deployments </th>
@@ -158,6 +180,10 @@ Occasionally, Sentry will request additional permissions to your GitHub account
          <th>Issues </th>
          <td>Read & Write </td>
        </tr>
+       <tr>
+         <th>Metadata </th>
+         <td>Read-only </td>
+       </tr>
        <tr>
          <th>Pages </th>
          <td>No Access </td>
@@ -170,6 +196,10 @@ Occasionally, Sentry will request additional permissions to your GitHub account
          <th>Repository Contents </th>
          <td>Read & Write </td>
        </tr>
+       <tr>
+         <th>Webhooks </th>
+         <td>Read & Write </td>
+       </tr>
        <tr>
          <th>Single File </th>
          <td>No Access </td>
@@ -178,6 +208,10 @@ Occasionally, Sentry will request additional permissions to your GitHub account
          <th>Repository Projects </th>
          <td>No Access </td>
        </tr>
+       <tr>
+         <th>Email addresses </th>
+         <td>Read-only </td>
+       </tr>
        <tr>
          <th>Organization members </th>
          <td>Read-only </td>
@@ -193,6 +227,14 @@ Occasionally, Sentry will request additional permissions to your GitHub account
 
    <table>
      <tbody>
+       <tr>
+         <th>Check run </th>
+         <td>Yes </td>
+       </tr>
+       <tr>
+         <th>Check suite </th>
+         <td>Yes </td>
+       </tr>
        <tr>
          <th>Delete </th>
          <td>Yes </td>
@@ -229,6 +271,14 @@ Occasionally, Sentry will request additional permissions to your GitHub account
          <th>Pull Request </th>
          <td>Yes </td>
        </tr>
+       <tr>
+         <th>Pull request review </th>
+         <td>Yes </td>
+       </tr>
+       <tr>
+         <th>Pull request review comment </th>
+         <td>Yes </td>
+       </tr>
        <tr>
          <th>Push </th>
          <td>Yes </td>