Comment 7 for bug 1960858

When requesting a token from the registry API, we can set the scope in the request:

https://docs.docker.com/registry/spec/auth/token/#requesting-a-token

If we are using a permanent token instead, docker hub does provide scoped tokens for team accounts as per https://docs.docker.com/docker-hub/access-tokens/