PyPI upload token. The macaroon body always opens with the base64 of the issuing domain, so pypi-AgEIcHlwaS5vcmc for pypi.org and pypi-AgENdGVzdC5weXBpLm9yZw for test.pypi.org are fixed prefixes. No practical noise, and the fifty character minimum on the tail keeps a bare prefix quoted in documentation out. No collision.
Label: PYPI_TOKEN
\bpypi-AgE(?:IcHlwaS5vcmc|NdGVzdC5weXBpLm9yZw)[A-Za-z0-9_-]{50,}(?![A-Za-z0-9_-])password = pypi-AgEIcHlwaS5vcmcAbCdEf0123456789_-AbCdEf0123456789_-AbCdEf0123456789_-AbCdEf0123456789_- → pypi-AgEIcHlwaS5vcmcAbCdEf0123456789_-AbCdEf0123456789_-AbCdEf0123456789_-AbCdEf0123456789_-Le jeton de test pypi-AgENdGVzdC5weXBpLm9yZwxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx est publie. → pypi-AgENdGVzdC5weXBpLm9yZwxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxpypi-token-herepypi-AgEIcHlwaS5vcmcSHORTTags: international, secrets, software-dev