{"meta":{"title":"GitHub token is required to upload SARIF results","intro":"You need to provide an authentication method for the upload process to use to access the repository.","product":"Security and code quality","breadcrumbs":[{"href":"/en/code-security","title":"Security and code quality"},{"href":"/en/code-security/reference","title":"Reference"},{"href":"/en/code-security/reference/code-scanning","title":"Code scanning"},{"href":"/en/code-security/reference/code-scanning/sarif-files","title":"SARIF files"},{"href":"/en/code-security/reference/code-scanning/sarif-files/troubleshoot-sarif-uploads","title":"Troubleshoot SARIF uploads"},{"href":"/en/code-security/reference/code-scanning/sarif-files/troubleshoot-sarif-uploads/missing-token","title":"GitHub token missing"}],"documentType":"article"},"body":"# GitHub token is required to upload SARIF results\n\nYou need to provide an authentication method for the upload process to use to access the repository.\n\n## About this error\n\n```text\nA GitHub token is required to upload SARIF results but none was specified\n```\n\nThis error is reported if the upload process does not reference an authentication method, or if that method has the wrong permission. The permissions required to upload SARIF file to a repository are the same no matter what process you use to upload the data.\n\n* Fine-grained personal access tokens require `write` scope for the repository.\n* Classic personal access tokens require `security_events` scope for the repository for private or internal repositories. You can use tokens with the `public_repo` scope for public repositories.\n* GitHub Apps require `security_events` scope for the repository.\n\nYou could see this error for SARIF files created using any tool and uploaded using any method.\n\n## Fixing the problem\n\nCreate a new personal access token or GitHub App with the correct permission. For more information see, [Managing your personal access tokens](/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens), or [Authenticating as a GitHub App](/en/apps/creating-github-apps/authenticating-with-a-github-app/authenticating-as-a-github-app) and [Deciding when to build a GitHub App](/en/apps/creating-github-apps/about-creating-github-apps/deciding-when-to-build-a-github-app)."}