Inclusion of example JWT in README.md is being flagged by secret scanning #36

Activity

1. aldas commented on Oct 13, 2025

   

   aldas

   on Oct 13, 2025

   Contributor

   More actions

   I assume []byte("secret") is the problematic part? IF you propose something that will pass your checks we probably can change it so.
2. castellotti commented on Oct 13, 2025

   

   castellotti

   on Oct 13, 2025

   ContributorAuthor

   More actions

   Thanks for the quick reply! The ticket being opened on our side begins:

   Finding Name:
   HTTP bearer authentication header
   
   Finding Description:
   GitHub Advanced security has discovered a secret in the repository "[repository name]" using the secret scanning pattern "HTTP bearer authentication header"
   

   and simply highlights the full JWT text content. I believe more details are here.

   I think changing the content of the token to something like YOURTOKEN would resolve the issue.
3. aldas commented on Oct 13, 2025

   

   aldas

   on Oct 13, 2025

   Last edited by aldas

   Contributor

   More actions

   Ok, if it is Github then ChatGPT suggets that

   If you routinely include such headers in docs, add .github/secret_scanning.yml to auto-close alerts for specific paths (e.g., README or /docs/**):

   paths-ignore:
     - "README.md"
     # or, for all docs:
     # - "docs/**"

   This will close matching alerts as “ignored by configuration.”

   https://docs.github.com/en/code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/excluding-folders-and-files-from-secret-scanning
4. aldas commented on Oct 13, 2025

   

   aldas

   on Oct 13, 2025

   Contributor

   More actions

   PR for github/secret_scanning.yml would be OK from our side
5. castellotti commented on Oct 13, 2025

   

   castellotti

   on Oct 13, 2025

   ContributorAuthor

   More actions

   Thanks again, I have created a PR with the suggested change.
6. aldas commented on Oct 14, 2025

   

   aldas

   on Oct 14, 2025

   Last edited by aldas

   Contributor

   More actions

   alright, PR is merged, I hope it helps.
7. aldas

   closed this as completedon Nov 20, 2025