Troubleshooting and Support
If you encounter any issue while using GitHub Quick Review (ghqr), run the command with the --debug flag to enable verbose logging:
ghqr scan -o my-org --debug
Authentication Errors
If you receive 401 Unauthorized or 403 Forbidden errors:
- Verify your
GITHUB_TOKENis set and valid. - Check that your token has the required scopes (see Usage - Authentication).
- For enterprise resources, ensure your token has
read:enterprisescope and that SSO is authorized for the enterprise. - If using GitHub Enterprise Cloud with Data Residency (GHE.com), ensure you pass
--hostnameor setGH_HOST(see Usage - GHE.com).
GHES Connection Errors
If ghqr cannot connect to your GitHub Enterprise Server instance:
- Verify
GH_TOKENorGITHUB_TOKENis set and was created on the GHES instance, not on github.com. - Ensure the hostname is correct and reachable from your network (e.g.
ghes.example.com). - The token must have
site_adminscope for full scanning capabilities. - If some checks show “not available”, the token may lack sufficient permissions. Re-create the token with
site_adminscope. - GHES instances behind a VPN or firewall require network access from the machine running ghqr.
Rate Limiting
GitHub API has rate limits (5,000 requests/hour for REST, 5,000 points/hour for GraphQL). For large enterprises or organizations, ghqr handles rate limiting automatically with exponential backoff. If a scan is taking a long time, this is expected behavior for large environments.
Unexpected or Missing Findings
- Ensure your token has all the required scopes listed in Usage - Authentication.
- Confirm the organization or enterprise slug is correct and that the token has been granted SSO access if your enterprise uses SAML.
- For repositories that show no findings, verify the token has
reposcope (not justpublic_repo).
Support
This project uses GitHub Issues to track bugs and feature requests. Before logging an issue, please check the troubleshooting steps above.
Please search the existing issues before filing new ones to avoid duplicates.
- For bugs and feature requests: GitHub Issues
- For questions and discussion: GitHub Discussions
Support for this project is limited to the resources listed above.
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.