diff --git a/.github/workflows/grafana.yml b/.github/workflows/grafana.yml
index 129619ec..fcdc636d 100644
--- a/.github/workflows/grafana.yml
+++ b/.github/workflows/grafana.yml
@@ -100,6 +100,8 @@ jobs:
 
       - name: Publish image
         run: |
+            # if you want to do this manually, use a PAT (classic) with `write:packages`:
+            # https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-container-registry#authenticating-with-a-personal-access-token-classic
             echo ${{ secrets.GITHUB_TOKEN }} | docker login "$REGISTRY" -u ${{ github.actor }} --password-stdin
             docker tag "$IMAGE_NAME" "$PUBLIC_IMAGE_NAME":latest
             docker push "$PUBLIC_IMAGE_NAME":latest