Which permission allows a workflow to create and update check runs on a pull request?
Select an answer to reveal the explanation.
Short Explanation and Infographic
checks:write is the permission for creating and updating GitHub Checks API check runs — the rich status indicators on PRs.
Full explanation below image
Full Explanation
The 'checks: write' permission allows creating and updating check runs and check suites via the GitHub Checks API. Check runs provide rich PR feedback with annotations, summaries, and detailed output. 'pull-requests: write' allows PR reviews and comments but not check runs. 'statuses: write' allows creating commit status checks (the older, simpler API) but not the newer Checks API. 'contents: write' is for repository file content. Many CI tools (like actions that create test reports) require 'checks: write' to post results directly to the PR checks panel.