PS: GitHub didn't like this business strategy that much as they simply deleted that account.
I have no idea the context of the situation but this is how I read the post:
Trivy's Private Access Token is revoked. The bot was made to autonomously finds exploits and report vulnerabilities but after this situation it intends to cease operation.