diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 431f936..3f38fab 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -27,6 +27,9 @@ jobs:
         uses: quarto-dev/quarto-actions/publish@v2
         with:
           target: netlify
+          # NETLIFY_AUTH_TOKEN is a personal access token generated at
+          # https://app.netlify.com/user/applications, and it expires
+          # after an interval.
           NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
 
       # Publish on Quarto.pub (https://x-cite.quarto.pub/).
@@ -34,4 +37,6 @@ jobs:
         uses: quarto-dev/quarto-actions/publish@v2
         with:
           target: quarto-pub
+          # QUARTO_PUB_AUTH_TOKEN is generated at
+          # https://quartopub.com/profile.
           QUARTO_PUB_AUTH_TOKEN: ${{ secrets.QUARTO_PUB_AUTH_TOKEN }}