I personally used the “Github saver” option, so the token is hidden and thus only makes the changes savable and useable by me while remaining publicly readable by others. See additional details at https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens