Overriding token for specific action on self-hosted runner

I am attempting to run an action from a config repo. That action runs a binary that will then clone a different repo. If I use insteadOf with --global, the clone of the second repo works:

git config --global url."https://${NEW_TOKEN}@githubtest.company.biz/".insteadOf "https://githubtest.company.biz/"

However, this modifies the actions runner user’s git config and makes this token available to all actions run on this runner. Has anyone found a way to inject this config for an action rather than a user (all actions)?