feat(<scope>): <title starting with lowercase letter>

[gilescope]

Is your feature request related to a problem? Please describe.
Github tokens are in the format: ghp_*

Describe the solution you'd like
I'd expect them to be flagged as a secret.

Describe alternatives you've considered
N/A

[cx-leonardo-fontes]

Hey @gilescope,

We already have a rule that detects GitHub Personal Access Tokens. Classic PATs use the ghp_ prefix followed by 36 alphanumeric characters.

To reduce false positives, detection isn’t based on the pattern alone, we also apply an entropy check. Very low-entropy placeholders (for example, ghp_aaaaaaaa…) may be ignored even if they match the pattern. This helps avoid flagging obvious test strings.

If you still think you got a real-world sample that wasn’t flagged, please share some context of why do you think this is not working as intended.

Thanks in advance.