! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope)
Your token can’t modify GitHub Actions workflow files without the workflow scope.
Seen on:
Git
Meaning
Pushing changes under .github/workflows requires a classic PAT with the workflow scope, or a fine-grained token with Workflows write permission.
Common causes
- PAT without workflow scope
- OAuth app token without workflow permission
⚡ Quick fix
- Regenerate the token with the workflow scope
- Use gh auth refresh -s workflow
Detailed fix by platform
Git
gh auth refresh -h github.com -s workflow
How to diagnose
- Token — Scopes include workflow?
- Recent change — Did it start after a deploy, upgrade, or configuration change? Compare with the last working version.
🧠 Still stuck? Analyze your error
Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.
Was this page helpful?
Report a correction or suggest an improvement
Last updated 2 Oct 2026