Secret scanning is now available for free on public repositories
Searching for creds can be tricky if they can't be readily distinguished from other text.Can anyone think of a problem with generating customer API keys that have a known prefix that makes them more detectable?For example, a key like "FooSecret.ZTNiMGM0NDI5OGZjMWMxNDlhZmJmNGM4OTk2ZmI5". I wouldn't think that'd open up any new attacks, but I'm no expert on the matter.