Pull request overview

Updates the artifact token scanner to recognize the new ghs_ token format (allowing . and _ and variable length) and adjusts scanning logic to avoid double-counting overlapping matches.

Changes:

• Updates ghs_ token regexes to allow the new character set and non-fixed length.
• Changes file scanning from String.match() to matchAll() with match-index tracking to deduplicate overlaps.
• Updates unit tests to include a new-format ghs_ example and align expectations with the new matching behavior.

Copilot's findings

  const seenMatches = new Set<number>();
  try {
    const content = fs.readFileSync(filePath, "utf8");

    for (const { type, pattern } of GITHUB_TOKEN_PATTERNS) {
      const regex = new RegExp(pattern.source, pattern.flags);
      let matchCount = 0;

      for (const match of content.matchAll(regex)) {
        const index = match.index;
        if (index === undefined || seenMatches.has(index)) {
          continue;
        }

        seenMatches.add(index);
        findings.push({ tokenType: type, filePath: relativePath });
        matchCount++;
      }

• Files reviewed: 2/3 changed files
• Comments generated: 3