[D] To authenticate to a GitHub Packages registry within a GitHub Actions workflow, you can use:
*-> GITHUB_TOKEN to publish packages associated with the workflow repository.
* A personal access token (classic) with at least read:packages scope to install packages associated with other private repositories (GITHUB_TOKEN can be used if the repository is granted read access to the package.
[E] You can use the GITHUB_TOKEN to make authenticated API calls. This example workflow creates an issue using the GitHub REST API:
Reference:
https://docs.github.com/en/packages/learn-github-packages/introduction-to-github-packages
https://docs.github.com/en/actions/tutorials/authenticate-with-github_token