mirror of
https://github.com/github/codeql.git
synced 2025-12-22 11:46:32 +01:00
The signing key that is being set, is _not_ what is being parsed. A _JWT_ is being parsed, that will then be verified using the set key. (Or in our case not, because we're looking for security problems :P)