GitHub does this with the tokens they issue. They even have a checksum in the token, so they can check if the token is syntactically valid: https://github.blog

GitHub does this with the tokens they issue. They even have a checksum in the token, so they can check if the token is syntactically valid: https://github.blog/2021-04-05-behind-githubs-new-authentication-token-formats/ https://github.blog/2021-04-05-behind-githubs-new-authentica... They have a list of supported secrets they can find via automated scans: https://docs.github.com/en/code-security/secret-scanning/secret-scanning-patterns https://docs.github.com/en/code-security/secret-scanning/sec...