Secret scanning is now available for free on public repositories
Searching for creds can be tricky if they can't be readily distinguished from other text.<p>Can anyone think of a problem with generating customer API keys that have a known prefix that makes them more detectable?<p>For example, a key like "FooSecret.ZTNiMGM0NDI5OGZjMWMxNDlhZmJmNGM4OTk2ZmI5". I wouldn't <i>think</i> that'd open up any new attacks, but I'm no expert on the matter.