Initially the Trivy Cloud API had been designed to use a long life JWT token, this has now been switched to a long life refresh token used to request short life access tokens. The access token will be used to interact with the trivy server and the api.