`secrets.GITHUB_TOKEN` is limited by design, commenting on PR need more permission. Tension: commenting on PR need more permission. Outcome: The reason is that when a user open a PR, it runs on his branch, and his branch doesn't have access to secrets.

610e2a11-cda5-4be3-a207-fea5d8330257