piighost/github-token

Name: piighost/github-token
License: https://opensource.org/licenses/MIT

GitHub token: the classic prefixed forms (ghp_ personal, gho_ OAuth, ghu_ user-to-server, ghs_ server-to-server, ghr_ refresh) and the fine-grained form github_pat_ followed by eighty-two characters.

Label: GITHUB_TOKEN

Pattern

\b(?:gh[pousr]_[A-Za-z0-9]{36,}|github_pat_[A-Za-z0-9_]{82})\b

Must be caught

git remote set-url origin https://ghp_abcdefghijklmnopqrstuvwxyz0123456789@github.com/o/r → ghp_abcdefghijklmnopqrstuvwxyz0123456789
Token ghs_ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 expired. → ghs_ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789

Must be left alone

ghp_abcdef123
ghx_abcdefghijklmnopqrstuvwxyz0123456789

Tags: international, secrets, software-dev

Download the detector as TOML