Scaffolding may need to commit to protected branches and any updates of .github/workflows needs the workflows:write permission, only available via a GitHub App. Additionally, if any of the commits should trigger GitHub Actions, the default GITHUB_TOKEN will not work.