Detach configurations from repositories

Detach code security configuration(s) from a set of repositories. Repositories will retain their settings but will no longer be associated with the configuration.

The authenticated user must be an administrator or security manager for the organization to use this endpoint.

Repositories with active enterprise-enforced attachments are skipped unless the authenticated user can manage the enterprise's code security settings; the rest are detached. Inactive enterprise-enforced attachments, such as failed attachments, are detached. The request still returns 204 if every repository is skipped.

OAuth app tokens and classic PATs require the write:org scope. Managing enterprise-enforced configurations also requires admin:enterprise and is not supported by fine-grained PATs or GitHub App access tokens.