You can't pull a docker image from a private github container registry without a personal access token. Gitlab's group and project level deploy tokens are great.