From 96cfd04428e59ceda9d780045b20013161eeb5c3 Mon Sep 17 00:00:00 2001
From: Alex Sohn <alexsohn1126@gmail.com>
Date: Fri, 24 Jul 2026 10:10:43 -0400
Subject: [PATCH] docs(github): sync app permissions and events with live
 GitHub app

Update the GitHub integration docs to match the current sentry GitHub
app configuration (verified via `gh api /apps/sentry`).

- Add the Email Addresses (Account-level, read-only) permission to the
  GitHub Permissions table
- develop-docs: add Actions, Code quality, and Code scanning alerts
  permissions and the check_run, check_suite, pull_request_review, and
  pull_request_review_comment events to the self-hosted app setup

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 develop-docs/integrations/github.mdx                | 9 ++++++++-
 docs/integrations/source-code-mgmt/github/index.mdx | 1 +
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/develop-docs/integrations/github.mdx b/develop-docs/integrations/github.mdx
index c92158f7d562d..10b8611f506c8 100644
--- a/develop-docs/integrations/github.mdx
+++ b/develop-docs/integrations/github.mdx
@@ -20,7 +20,7 @@ For local development make sure to use your ngrok URL as the prefix.
 </Alert>
 
 <CreateGitHubAppForm
-  url="https://github.com/organizations/:org/settings/apps/new?name=:org-Sentry-Integration&public=false&members=read&emails=read&administration=read&contents=write&checks=write&statuses=write&issues=write&pull_requests=write&repository_hooks=write&url=:url-prefix&callback_urls[]=:url-prefix%2Fauth%2Fsso%2F&callback_urls[]=:url-prefix%2Fextensions%2Fgithub%2Fsetup%2F&setup_url=:url-prefix%2Fextensions%2Fgithub%2Fsetup%2F&webhook_url=:url-prefix%2Fextensions%2Fgithub%2Fwebhook%2F&events[]=push&events[]=pull_request&webhook_active=true"
+  url="https://github.com/organizations/:org/settings/apps/new?name=:org-Sentry-Integration&public=false&members=read&emails=read&administration=read&contents=write&checks=write&statuses=write&issues=write&pull_requests=write&repository_hooks=write&actions=write&code_quality=read&security_events=read&url=:url-prefix&callback_urls[]=:url-prefix%2Fauth%2Fsso%2F&callback_urls[]=:url-prefix%2Fextensions%2Fgithub%2Fsetup%2F&setup_url=:url-prefix%2Fextensions%2Fgithub%2Fsetup%2F&webhook_url=:url-prefix%2Fextensions%2Fgithub%2Fwebhook%2F&events[]=push&events[]=pull_request&events[]=check_run&events[]=check_suite&events[]=pull_request_review&events[]=pull_request_review_comment&webhook_active=true"
   defaultOrg="your-organization"
   defaultUrlPrefix="https://your-sentry-url-prefix.com"
 />
@@ -45,7 +45,10 @@ When prompted for permissions, choose the following:
 | Repository / Administration                      | Read-only    |
 | Organization permissions / members (optional)    | Read-only    |
 | Account permissions / Email addresses (optional) | Read-only    |
+| Repository / Actions                             | Read & write |
 | Repository / Checks                              | Read & write |
+| Repository / Code quality                        | Read-only    |
+| Repository / Code scanning alerts                | Read-only    |
 | Repository / Commit Statuses                     | Read & write |
 | Repository / Contents                            | Read & write |
 | Repository / Issues                              | Read & write |
@@ -54,6 +57,8 @@ When prompted for permissions, choose the following:
 
 When prompted to subscribe to events, choose the following:
 
+- Check run
+- Check suite
 - Delete
 - Fork
 - Issue comment
@@ -63,6 +68,8 @@ When prompted to subscribe to events, choose the following:
 - Organization
 - Public
 - Pull Request
+- Pull request review
+- Pull request review comment
 - Push
 - Release
 - Repository
diff --git a/docs/integrations/source-code-mgmt/github/index.mdx b/docs/integrations/source-code-mgmt/github/index.mdx
index e64822f0765c4..a78f4a5b4907e 100644
--- a/docs/integrations/source-code-mgmt/github/index.mdx
+++ b/docs/integrations/source-code-mgmt/github/index.mdx
@@ -76,6 +76,7 @@ The following permissions are required for the GitHub integration to work correc
 | Checks                                          | Read & Write | To show detailed pass/fail results (e.g. test coverage, release health, AI Code Review) as GitHub Checks on PRs or commits.                                       |
 | Commit Statuses                                 | Read & Write | To post status checks to commits in GitHub and integrate with branch protection rules.                                                                            |
 | Contents                                        | Read & Write | To fetch source files, commits, and blame data for Suspect Commits, track files in Releases, and create branches and pull requests.                               |
+| <span>Email Addresses<br/><em>_[Account-level]_</em></span> | Read-only    | To associate GitHub identities with Sentry accounts for GitHub SSO and contributor mapping.                                                          |
 | Issues                                          | Read & Write | To create GitHub issues from Sentry events and update linked issues.                                                                                              |
 | <span>Members<br/><em>_[Org-level]_</em></span> | Read-only    | To map organization users to GitHub identities for improved issue attribution and collaboration.                                                                  |
 | Metadata                                        | Read-only    | To identify repository structure, names, default branches, and visibility.                                                                                        |