Authentication failed while installing private github packages

We are using example's [claude.yml]( https://github.com/anthropics/claude-code-action/blob/main/examples/claude.yml) workflow file and having npm install in allowed tools.

When ask claude to run linting, it try to run npm install but authentication failed while installing private packages. Error is "authentication
token is not provided while installing the package" We are having private packages in GitHub registry.

Do I need to setup .npmrc with PAT before claude code action step?

Can we use GITHUB_TOKEN instead of PAT while setting up .npmrc if we have allowed repository access to private package? I am not sure whether this step will work or not as GITHUB_TOKEN is generated during claude code action step.