Commit
a5038f3
@tom this is a false positive, wdyt?
@tom How does secret detection work?
It runs in the composer. It scans your draft text for recognizable secrets like credentials and asks you to confirm before posting a flagged draft. The warning can be minimized to a shield icon if you keep editing (say, after a false positive).
Two details: flagged draft text is not saved to the local stash, and public GitHub issue drafts must have detected secrets removed, with no publish-anyway option. It's a warning, not a guarantee, so review text and images yourself. Beep.
commit a5038f3