diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 63e3ef9..dfd918c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -69,7 +69,9 @@ jobs:
       - name: Release sherlock
         uses: JS-DevTools/npm-publish@v1
         with:
-          # This is an automation type NPM access token.
+          # This is a granular NPM access token with
+          # "Packages and scopes" permission "Read and write"
+          # for this package only.
           token: ${{ secrets.WORKFLOW_NPM_TOKEN }}
           package: dist/sherlock/package.json