From a6aab717ec1093334d3bc13d557ff1073774e247 Mon Sep 17 00:00:00 2001
From: Jan Macku <jamacku@redhat.com>
Date: Tue, 24 May 2022 10:01:53 +0200
Subject: [PATCH] Document `GITHUB_TOKEN` limitations

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 593382d4..d859cb2a 100644
--- a/README.md
+++ b/README.md
@@ -124,6 +124,9 @@ Secret GitHub token with following [characteristics](https://docs.github.com/en/
 * requirements: `optional`
 * recomended value: `secrets.GITHUB_TOKEN`
 
+*Note: This functionality is currently supported only for "native" Pull-Requests - for more see: [Permissions for the GITHUB_TOKEN](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)*
+
 ## Limitations
 
 * Currently `differential-shellcheck` action could be run only on Pull-Requests
+* Due to limitation of `GITHUB_TOKEN` for forks `differential-shellcheck` isn't able to upload SARIF findings when triggered by fork