Clarify why the GitHub app requests repository permissions for Code Connect UI

Hi there, thanks for raising this! The Code Connect team has documentation that explains the GitHub permissions requested during the installation flow, including what each permission is used for and how it relates to Code Connect functionality:

https://developers.figma.com/docs/code-connect/github-permissions/

Could you take a look and let us know if that answers your questions?

If there's specific information you feel is still missing from the documentation (for example, around a particular permission or repository setting), please let us know by filling out this form to improve our developer documentation: Share your feedback. Thanks!

Hi, That clears things a bit up. Can we also run without admin permissions? We don’t want any repository creation or maintenance via Figma. 

Thanks for asking, I’ve checked internally and unfortunately, this isn't currently possible. Figma uses the same GitHub App across all surfaces that require a GitHub connection, and GitHub doesn't yet support installing an app with partial permissions. The Administration permission is only used for repository creation (as mentioned in the docs), but there's no way to exclude it at installation.

That said, GitHub offers org-level policies that allow you to restrict what anyone (including connected apps like Figma) can do within your repositories. You can check their guide here:

•  Enforcing repository management policies in your enterprise
•  Creating rulesets for repositories in your organization

It's also worth noting that this is something the team is actively collecting feedback on, so your input is valuable! Feel free to share it via the documentation feedback form. Thank you 🙏