create-a-commit-comment, commit-comments don't mention that the endpoint needs to be enabled

[jsoref]

Code of Conduct

• I have read and agree to the GitHub Docs project's Code of Conduct

What article on docs.github.com is affected?

https://docs.github.com/en/rest/commits/comments?apiVersion=2026-03-10#create-a-commit-comment
https://docs.github.com/en/rest/guides/working-with-comments?apiVersion=2022-11-28#commit-comments

What part(s) of the article would you like to see updated?

HTTP response status codes for "Create a commit comment"

Status code	Description
201	Created
403	Forbidden
422	Validation failed, or the endpoint has been spammed.

Should mention that the endpoint can be disabled.

Additional information

Here's an example: https://github.com/check-spelling-sandbox/Viceroy/actions/runs/24851488140/job/72761491315#step:2:1359

{
  "message": "Resource not accessible by integration",
  "documentation_url": "https://docs.github.com/rest/commits/comments#create-a-commit-comment",
  "status": "403"
}

(I disabled commit comments on this one repository for testing and reran the job to get a response.)

1. It's possible to disable commit-comments across an organization: https://github.blog/changelog/2026-04-23-disable-commit-comments-across-your-organization/
2. It's possible to disable commit-comments per repository: https://github.blog/changelog/2026-03-25-disable-comments-on-individual-commits/

[jsoref]

Note that afaict it is not possible to programmatically determine if this is enabled. Certainly checking the repository in question via https://api.github.com/repos/check-spelling-sandbox/Viceroy didn't show any difference (after toggling the setting).

[Sharra-writes]

@jsoref Another auto-generated one, so I'll hunt down the endpoint owner.

[Sharra-writes]

@jsoref Sorry, this is taking a bit because apparently no one officially owns this endpoint, so I have to figure out who should own it instead, and then make sure they agree. I realized last night that the second link isn't auto-generated. Do you think we need to update that one with something about disabling endpoints, too?

[jsoref]

I think we should.