test(trivy-action): token with read only perms

test(trivy-action): token with read only perms #72