Secret scanning is done in partnership with third parties to detect and revoke api credentials. It is based on regexp matching and involves making a call to a w

Secret scanning is done in partnership with third parties to detect and revoke api credentials. It is based on regexp matching and involves making a call to a webhook owned by the third party to revoke the secret. That doesn't work for arbitrary cookies.