Update github_rest_api/github.py

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

Author: dclong

github_rest_api/__init__.py

@@ -1,5 +1,11 @@
 """GitHub REST APIs."""
 
-from .github import Organization, Repository, RepositoryType, User
+from .github import (
+    Organization,
+    Repository,
+    RepositoryType,
+    SecretVisibility,
+    User,
+)
 
-__all__ = ["Organization", "Repository", "RepositoryType", "User"]
+__all__ = ["Organization", "Repository", "RepositoryType", "SecretVisibility", "User"]

github_rest_api/github.py

@@ -82,7 +82,9 @@ def _delete(self, url, raise_for_status: bool = True) -> requests.Response:
             resp.raise_for_status()
         return resp
 
-    def _put(self, url: str, raise_for_status: bool = True, **kwargs) -> requests.Response:
+    def _put(
+        self, url: str, raise_for_status: bool = True, **kwargs
+    ) -> requests.Response:
         resp = requests.put(
             url=url,
             headers=self._headers,
@@ -394,6 +396,12 @@ class RepositoryType(StrEnum):
     PRIVATE = "private"
 
 
+class SecretVisibility(StrEnum):
+    ALL = "all"
+    PRIVATE = "private"
+    SELECTED = "selected"
+
+
 class Owner(GitHub, metaclass=ABCMeta):
     """An abstract owner class representing an organization or user."""
 
@@ -491,7 +499,7 @@ def create_or_update_secret(
         self,
         name: str,
         value: str,
-        visibility: str = "all",
+        visibility: SecretVisibility = SecretVisibility.ALL,
         selected_repository_ids: Sequence[int] = (),
     ) -> requests.Response:
         """Create or update an organization secret.
@@ -506,6 +514,10 @@ def create_or_update_secret(
             raise ValueError("A string value is required for `name`.")
         if not isinstance(value, str):
             raise ValueError("A string value is required for `value`.")
+        if selected_repository_ids and visibility != SecretVisibility.SELECTED:
+            raise ValueError(
+                "`selected_repository_ids` can only be provided when `visibility` is 'selected'."
+            )
         key = self.get_secret_public_key()
         json: dict[str, Any] = {
             "encrypted_value": _encrypt_secret(key["key"], value),