docs: add note about permissive GITHUB_TOKEN

README.md

@@ -17,7 +17,7 @@ A GitHub Action for deleting artifacts within the workflow run. This can be usef
 See [action.yml](action.yml)
 
 > [!IMPORTANT]
-> Support for `actions/upload-artifact@v4` utilizes GitHub's REST API, and requires a token with read and write access to actions.
+> Support for `actions/upload-artifact@v4` utilizes the GitHub REST API, and requires a permissive [`GITHUB_TOKEN`](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token), or a PAT with read and write access to actions.
 
 ### Delete an individual artifact
 
@@ -36,7 +36,7 @@ steps:
 
     - uses: geekyeggo/delete-artifact@v4
       with:
-          token: ${{ secrets.TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
           name: my-artifact
 ```
 
@@ -46,7 +46,7 @@ steps:
 steps:
     - uses: geekyeggo/delete-artifact@v4
       with:
-          token: ${{ secrets.TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
           name: |
               artifact-*
               binary-file
@@ -61,7 +61,7 @@ By default, the action will fail when it was not possible to delete an artifact
 steps:
     - uses: geekyeggo/delete-artifact@v4
       with:
-          token: ${{ secrets.TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
           name: okay-to-keep
           failOnError: false
 ```