diff --git a/ql/src/semmle/go/security/SensitiveActions.qll b/ql/src/semmle/go/security/SensitiveActions.qll
index b842365c3cc..2b7fa8998f4 100644
--- a/ql/src/semmle/go/security/SensitiveActions.qll
+++ b/ql/src/semmle/go/security/SensitiveActions.qll
@@ -245,7 +245,7 @@ module PasswordHeuristics {
     exists(string normalized | normalized = password.toLowerCase() |
       count(normalized.charAt(_)) = 1 or
       normalized
-          .regexpMatch(".*(pass|test|sample|example|secret|root|admin|user|change|auth|redacted).*")
+          .regexpMatch(".*(pass|test|sample|example|secret|root|admin|user|change|auth|redacted|0123456789).*")
     )
   }
 }