Drata now supports GitHub rulesets in our GitHub integration for Version Control. In order for the Drata Autopilot system to be able to read your rulesets and apply them to the Formal Code Review Process test, we must make an API call to fetch your rulesets.
In order to do that, GitHub has limited that GET API call under the Organization permissions: Administration write permission.
If you've installed the GitHub Drata app (for Version Control) before 8/19/2024, we need to request your approval on the app for these updated permissions. If you choose to not approve the extra permission, everything will work as it has in the past, though Drata will not be able to support GitHub Rulesets in your account.
Drata only uses this permission to call the two following APIs