Permissions

Woven requires the following permissions

Scope	Permission	Reason
Contents	READ & WRITE	Allows Woven to sync the metadata back to your codebase. We do not need elevated access to your protected branches.
Pull Requests	READ & WRITE	Allows Woven to create simple onboarding experience such as auto-generated configuration PR
Actions	READ & WRITE	To manage Woven's CI workflow that runs on GitHub Actions in your environment
Checks	READ & WRITE	Read third-party checks (e.g. dbt Cloud) and create Woven's checks to block PR from merging if data policies aren't met
Workflows	READ & WRITE	To manage Woven's CI workflow that runs on GitHub Actions in your environment
Secrets	READ & WRITE	To set Woven API keys.
Variables	READ & WRITE	To set configuration variables and feature flags
User Email	READ	Send notifications to users