If a PAT does not work for you, you could also create a new GitHub app and use it's token in your workflows. See this comment in #87 for details. See #322 for details and discussions around this topic ...