# Source: https://docs.snyk.io/scan-with-snyk/snyk-iac/detect-manually-created-resources/configure-cloud-providers/configure-github-provider.md

# Configure GitHub provider

## Authentication for GitHub provider

To use `iac describe`, set up credentials to make authenticated requests to GitHub. Snyk retrieves configuration information from [environment variables](https://registry.terraform.io/providers/integrations/github/latest/docs#argument-reference).

GitHub tokens can be created from [this GitHub page](https://github.com/settings/tokens/).

```
$ GITHUB_TOKEN=14758f1afd44c09b7992073ccf00b43d \
  GITHUB_ORGANIZATION=my-org \
  snyk iac describe --to="github+tf"
```

## Least privilege policy​ <a href="#least-privileged-policy" id="least-privileged-policy"></a>

The following GitHub token scopes are the minimum required for `iac describe` to scan every GitHub-supported resource.

```
# Required to enumerate private repos
repo

# Required to list your organization teams
# and other organization related resources
read:org
```

## **Repository permissions**

To see errors for the repositories listing, you must set the permission `repo` for your token. Without this permission, all private repositories appear as deleted from remote.