Access tokens which are not stored in a context or environment variable are not subject to masking. This can leave potentially sensitive tokens visible in build outputs. This request is to add a scanner/detector for GitHub access tokens and redact those values, the tokens to be redacted are those which meet the syntax format seen here:
Created by Ervin Grapp
·