Private Packages and run with Actions: Use GITHUB_TOKEN with packages read scope

[hfhbd]

Is there an existing issue for this?

• I have searched the existing issues

Feature description

To support private GitHub Packages registries (like maven), you need to create a PAT and store it in Dependabot secrets. But Dependabot already uses GitHub Actions containing the GITHUB_TOKEN. So, instead of using a PAT, it should be possible to use the GITHUB_TOKEN with packages read scope.

Use-case:
We want to get rid of long-living PATs created by users and use rotating/short living tokens provided by GitHub.