SARIF 결과를 업로드하려면 GitHub 토큰이 필요합니다.

이 문서의 내용

리포지토리에 액세스하는 데 사용할 업로드 프로세스에 대한 인증 방법을 제공해야 합니다.

About this error

A GitHub token is required to upload SARIF results but none was specified

This error is reported if the upload process does not reference an authentication method, or if that method has the wrong permission. The permissions required to upload SARIF file to a repository are the same no matter what process you use to upload the data.

  • Fine-grained personal access tokens require write scope for the repository.
  • Classic personal access tokens require security_events scope for the repository for private or internal repositories. You can use tokens with the public_repo scope for public repositories.
  • GitHub Apps require security_events scope for the repository.

You could see this error for SARIF files created using any tool and uploaded using any method.

Fixing the problem

Create a new personal access token or GitHub App with the correct permission. For more information see, "Managing your personal access tokens", or "Authenticating as a GitHub App" and "Deciding when to build a GitHub App."