B
75/100 First Seen
Feb 18, 2026
Last Scanned
Feb 22, 2026
Findings
1
Score
75/100
CRITICAL 1
Findings (1)
CRITICAL
GitHub personal access token
L39 Detects GitHub personal access tokens
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 FIX
Remove the GitHub token immediately and revoke it at github.com/settings/tokens. Use short-lived tokens via GitHub Apps instead of hardcoded PATs.
FP?
Likely FP if the matched string is a placeholder (e.g., ghp_xxxxxxxxxxxx) or appears in documentation describing token format rather than containing a real token.