Investigate GitHub personal access token

Build 1.3.4 · Scan 2026-10-14T08:19:00.773Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A GitHub personal access token. Depending on scope it can read or write private repositories — if valid, revoke it immediately.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

classes3.dex

Recorded match

ghp_•••••••• (21–40 chars, redacted)

Detector rule

github_pat

Recorded file locations