(fix): add the handlers for empty values

github/resource_github_actions_organization_permissions.go

@@ -147,14 +147,25 @@ func resourceGithubActionsOrganizationPermissionsCreateOrUpdate(d *schema.Resour
 	allowedActions := d.Get("allowed_actions").(string)
 	enabledRepositories := d.Get("enabled_repositories").(string)
 
-	_, _, err = client.Actions.EditActionsPermissions(ctx,
-		orgName,
-		github.ActionsPermissions{
-			AllowedActions:      &allowedActions,
-			EnabledRepositories: &enabledRepositories,
-		})
-	if err != nil {
-		return err
+	if allowedActions != "" {
+		_, _, err = client.Actions.EditActionsPermissions(ctx,
+			orgName,
+			github.ActionsPermissions{
+				AllowedActions:      &allowedActions,
+				EnabledRepositories: &enabledRepositories,
+			})
+		if err != nil {
+			return err
+		}
+	} else {
+		_, _, err = client.Actions.EditActionsPermissions(ctx,
+			orgName,
+			github.ActionsPermissions{
+				EnabledRepositories: &enabledRepositories,
+			})
+		if err != nil {
+			return err
+		}
 	}
 
 	if allowedActions == "selected" {

github/resource_github_actions_organization_permissions_test.go

@@ -270,4 +270,38 @@ func TestAccGithubActionsOrganizationPermissions(t *testing.T) {
 		})
 	})
 
+	t.Run("test disabling of actions at organization level", func(t *testing.T) {
+
+		enabledRepositories := "none"
+
+		config := fmt.Sprintf(`
+			resource "github_actions_organization_permissions" "test" {
+				enabled_repositories = "%s"
+			}
+		`, enabledRepositories)
+
+		check := resource.ComposeTestCheckFunc(
+			resource.TestCheckResourceAttr(
+				"github_actions_organization_permissions.test", "enabled_repositories", enabledRepositories,
+			),
+		)
+
+		testCase := func(t *testing.T, mode string) {
+			resource.Test(t, resource.TestCase{
+				PreCheck:  func() { skipUnlessMode(t, mode) },
+				Providers: testAccProviders,
+				Steps: []resource.TestStep{
+					{
+						Config: config,
+						Check:  check,
+					},
+				},
+			})
+		}
+
+		t.Run("with an organization account", func(t *testing.T) {
+			testCase(t, organization)
+		})
+	})
+
 }

github/resource_github_enterprise_actions_permissions.go

@@ -3,6 +3,7 @@ package github
 import (
 	"context"
 	"errors"
+	"log"
 
 	"github.com/google/go-github/v63/github"
 	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
@@ -149,14 +150,28 @@ func resourceGithubActionsEnterprisePermissionsCreateOrUpdate(d *schema.Resource
 	allowedActions := d.Get("allowed_actions").(string)
 	enabledOrganizations := d.Get("enabled_organizations").(string)
 
-	_, _, err := client.Actions.EditActionsPermissionsInEnterprise(ctx,
-		enterpriseId,
-		github.ActionsPermissionsEnterprise{
-			AllowedActions:       &allowedActions,
-			EnabledOrganizations: &enabledOrganizations,
-		})
-	if err != nil {
-		return err
+	if allowedActions == "" {
+		log.Printf("[DEBUG] The allowed_actions is not set")
+		_, _, err := client.Actions.EditActionsPermissionsInEnterprise(ctx,
+			enterpriseId,
+			github.ActionsPermissionsEnterprise{
+				EnabledOrganizations: &enabledOrganizations,
+			})
+		if err != nil {
+			return err
+		}
+	}
+
+	if allowedActions == "all" {
+		_, _, err := client.Actions.EditActionsPermissionsInEnterprise(ctx,
+			enterpriseId,
+			github.ActionsPermissionsEnterprise{
+				AllowedActions:       &allowedActions,
+				EnabledOrganizations: &enabledOrganizations,
+			})
+		if err != nil {
+			return err
+		}
 	}
 
 	if allowedActions == "selected" {

github/resource_github_enterprise_actions_permissions_test.go

@@ -285,4 +285,45 @@ func TestAccGithubActionsEnterprisePermissions(t *testing.T) {
 		})
 	})
 
+	t.Run("test disabling of actions at organization level", func(t *testing.T) {
+
+		enabledOrganizations := "none"
+
+		config := fmt.Sprintf(`
+			resource "github_enterprise_actions_permissions" "test" {
+				enterprise_slug = "%s"
+				enabled_organizations = "%s"
+			}
+		`, testEnterprise, enabledOrganizations)
+
+		check := resource.ComposeTestCheckFunc(
+			resource.TestCheckResourceAttr(
+				"github_enterprise_actions_permissions.test", "enabled_organizations", enabledOrganizations,
+			),
+		)
+
+		testCase := func(t *testing.T, mode string) {
+			resource.Test(t, resource.TestCase{
+				PreCheck:  func() { skipUnlessMode(t, mode) },
+				Providers: testAccProviders,
+				Steps: []resource.TestStep{
+					{
+						Config: config,
+						Check:  check,
+					},
+				},
+			})
+		}
+
+		t.Run("with an enterprise account", func(t *testing.T) {
+			if isEnterprise != "true" {
+				t.Skip("Skipping because `ENTERPRISE_ACCOUNT` is not set or set to false")
+			}
+			if testEnterprise == "" {
+				t.Skip("Skipping because `ENTERPRISE_SLUG` is not set")
+			}
+			testCase(t, enterprise)
+		})
+	})
+
 }