diff --git a/README.md b/README.md
index e1782b2..a9e71b4 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,7 @@ terraform {
 }
 
 inputs = {
+  gcp_project = "my-project"
   gcp_region = "us-west-1"
   github_repo = "my-repo"
   state_bucket_name = "my-repo-state-bucket"
@@ -46,7 +47,7 @@ remote_state {
     prefix = "${path_relative_to_include()}"
     project = local.gcp_project
     location = local.gcp_region
-    // Token comes from GOOGLE_OAUTH_ACCESS_TOKEN env var
+    access_token = get_env("GOOGLE_OAUTH_ACCESS_TOKEN", "")
   }
 }
 
@@ -66,13 +67,13 @@ include {
 
 locals {
   gcp_project = read_terragrunt_config(find_in_parent_folders("terragrunt.hcl")).locals.gcp_project
-  gcp_region = lower(read_terragrunt_config(find_in_parent_folders("terragrunt.hcl")).locals.gcp_region)
+  gcp_region  = lower(read_terragrunt_config(find_in_parent_folders("terragrunt.hcl")).locals.gcp_region)
 }
 
 generate "provider" {
-  path = "provider.tf"
+  path      = "provider.tf"
   if_exists = "overwrite_terragrunt"
-  contents = <<EOF
+  contents  = <<EOF
 provider "google" {
   project       = "${local.gcp_project}"
   region        = "${local.gcp_region}"
@@ -87,7 +88,7 @@ terraform {
 
 inputs = {
   gcp_project = local.gcp_project
-  gcp_region = local.gcp_region
+  gcp_region  = local.gcp_region
 }
 ```
 
@@ -118,14 +119,17 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4.1.7
-      - name: GCP auth
         uses: google-github-actions/auth@v2.1.5
         with:
+          export_environment_variables: false
+          create_credentials_file: false
           token_format: access_token
           workload_identity_provider: projects/918666231212/locations/global/workloadIdentityPools/github-actions/providers/github-actions
-          service_account: github-actions-plan@gha-gcp-opentofu-7.iam.gserviceaccount.com
+          service_account: github-actions-plan@gha-gcp-opentofu.iam.gserviceaccount.com
       - name: Terragrunt plan
       ...
+        env:
+          GOOGLE_OAUTH_ACCESS_TOKEN: ${{ steps.auth.outputs.access_token }}
 ```
 
 ### Module inputs