---
title: "2026-08-24 GitHub agent token capabilities"
description: "Evaluated least-privilege GitHub credentials for an agent that opens pull requests."
image: "https://docs.virdx.dev/img/virdx-social-card.png"
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.virdx.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# 2026-08-24 GitHub agent token capabilities

## Work Done

- Evaluated whether GitHub CLI can mint an agent-safe token and mapped the necessary GitHub permissions and enforcement boundaries for opening pull requests while observing CI.

## Lessons Learned: Pitfalls

- Fine-grained token and GitHub App permissions do not divide pull-request creation from merge operations, and branch writes can naturally start CI or sometimes enable repository-dispatch integrations.

## Lessons Learned: Improvements

- A reusable infrastructure SOP on agent GitHub credentials could document the recommended GitHub App permissions, mandatory branch ruleset, and use of an operation-filtering broker when an absolute no-merge/no-dispatch guarantee is required.

Source: https://docs.virdx.dev/knowledge/inbox/2026-08-24-infrastructure-github-agent-token-capabilities/index.mdx