HTTPS with a Personal Access Token
https://docs.github.com/en/packages/managing-github-packages-using-github-actions-workflows/publishing-and-installing-a-package-with-github-actions https://docs.github.com/en/actions/using-jobs/running-jobs-in-a-container#example-defining-credentials-for-a-container-registry
I have only tested with the most simple use case - publishing containers for that repo only (which is what the example in the preceding link shows).
Use the default provided ${{ secrets.GITHUB_TOKEN }} provided when you run an action on your repo
Make sure permissions are configured in the workflow yaml.$ some foo