Configure GitHub provider

Authentication for GitHub provider

To use iac describe, set up credentials to make authenticated requests to GitHub. Snyk retrieves configuration information from environment variables.

GitHub tokens can be created from this GitHub page.

$ GITHUB_TOKEN=14758f1afd44c09b7992073ccf00b43d \
  GITHUB_ORGANIZATION=my-org \
  snyk iac describe --to="github+tf"

Least privilege policy​

The following GitHub token scopes are the minimum required for iac describe to scan every GitHub-supported resource.

# Required to enumerate private repos
repo

# Required to list your organization teams
# and other organization related resources
read:org

Repository permissions

To see errors for the repositories listing, you must set the permission repo for your token. Without this permission, all private repositories appear as deleted from remote.