mirror of
https://github.com/github/codeql.git
synced 2026-05-14 11:19:27 +02:00
secretQuestion is ambiguous: it could be the question text (not sensitive) or a security question answer. Worse, the regex secrets?(question) also matches secretQuestionAnswer, which is clearly sensitive. Drop it to avoid false negatives.