list_github_api_calls_in_run
List all HTTPS calls to GitHub and api.github.com made by jobs in a specific workflow run. Audit API endpoints accessed, detect writes to unexpected repos, and identify surprising API calls from third-party actions.
Instructions
List every HTTPS call to github.com or api.github.com made by jobs in a specific workflow run. Useful for auditing which GitHub API endpoints a workflow touches — detecting writes to unexpected repos, surprising org access, or API calls from third-party Actions. Fast: one upstream API call. Requires a run_id — if the user doesn't supply one, call list_recent_workflow_runs first to find it. Returns calls grouped by job with step/tool attribution. The response has a top-level dashboard_url for the run AND a per-job dashboard_url deep-linking to the network-events tab scoped to that job. When presenting results, include the per-job link next to each job header.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| owner | Yes | GitHub organization | |
| repo | Yes | Repository name (without owner) | |
| runId | Yes | Workflow run ID |