diff --git a/coderd/gitauth/oauth.go b/coderd/gitauth/oauth.go
index 055a8c4d166c0..47a8e94f88803 100644
--- a/coderd/gitauth/oauth.go
+++ b/coderd/gitauth/oauth.go
@@ -41,7 +41,8 @@ var scope = map[codersdk.GitProvider][]string{
 	codersdk.GitProviderAzureDevops: {"vso.code_write"},
 	codersdk.GitProviderBitBucket:   {"account", "repository:write"},
 	codersdk.GitProviderGitLab:      {"write_repository"},
-	codersdk.GitProviderGitHub:      {"repo"},
+	// "workflow" is required for managing GitHub Actions in a repository.
+	codersdk.GitProviderGitHub: {"repo", "workflow"},
 }
 
 // regex provides defaults for each Git provider to