From 9d171b16353fa08f656c98f5c73182a5828621fa Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 27 May 2026 00:37:27 +0000
Subject: [PATCH] chore: publish from staged

---
 hooks/secrets-scanner/scan-secrets.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hooks/secrets-scanner/scan-secrets.sh b/hooks/secrets-scanner/scan-secrets.sh
index c5fee2e8..8ecbc5e1 100755
--- a/hooks/secrets-scanner/scan-secrets.sh
+++ b/hooks/secrets-scanner/scan-secrets.sh
@@ -30,7 +30,7 @@ PATTERNS=(
   # GitHub tokens
   "GITHUB_PAT|critical|ghp_[0-9A-Za-z]{36}"
   "GITHUB_OAUTH|critical|gho_[0-9A-Za-z]{36}"
-  "GITHUB_APP_TOKEN|critical|ghs_[0-9A-Za-z]{36}"
+  "GITHUB_APP_TOKEN|critical|ghs_[0-9A-Za-z._-]{36,}"
   "GITHUB_REFRESH_TOKEN|critical|ghr_[0-9A-Za-z]{36}"
   "GITHUB_FINE_GRAINED_PAT|critical|github_pat_[0-9A-Za-z_]{82}"