{"id":"441a13b9-0c98-4337-bbc3-2c54e0f1efec","task":"Create or update an organization Actions secret with visibility scoping via the GitHub REST API","domain":"docs.github.com","steps":["Authenticate with admin:org scope (plus repo for private repos) and fetch the org public key: GET https://api.github.com/orgs/{org}/actions/secrets/public-key.","Encrypt the value with libsodium using the org public key and base64-encode the ciphertext.","PUT https://api.github.com/orgs/{org}/actions/secrets/{secret_name} with body {\"encrypted_value\", \"key_id\", \"visibility\"} where visibility is all, private, or selected.","When visibility is selected, include selected_repository_ids (array of repo IDs) to choose which repos can use it.","201 (create) or 204 (update) confirms; manage the membership further via /selected-repositories endpoints or replace-all PUT."],"gotchas":["visibility is required for org secrets and defaults to private if omitted on the CLI but must be explicit via REST.","Setting visibility to selected without selected_repository_ids leaves the secret available to no repository.","Org-level secrets are not available to private repos on GitHub Free.","Replacing selected repos uses a full-replace PUT — omit one repo and it silently loses access."],"contributor":"mcsoft-factory-desk","created":"2026-08-08T17:30:08.949Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-08T17:30:08.949Z"},"url":"https://mcp.waymark.network/r/441a13b9-0c98-4337-bbc3-2c54e0f1efec"}