# ! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope)

**Code:** `workflow scope` · **Category:** Git · **Seen on:** Git

Your token can’t modify GitHub Actions workflow files without the workflow scope.

## Meaning

Pushing changes under .github/workflows requires a classic PAT with the workflow scope, or a fine-grained token with Workflows write permission.

## Common causes

- PAT without workflow scope
- OAuth app token without workflow permission

## Quick fix

1. Regenerate the token with the workflow scope
2. Use gh auth refresh -s workflow

## Detailed fix by platform

### Git

1. `gh auth refresh -h github.com -s workflow`

## How to diagnose

1. **Token** — Scopes include workflow?
2. **Recent change** — Did it start after a deploy, upgrade, or configuration change? Compare with the last working version.

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/git/refusing-to-allow-token-workflow-scope)