holdfastjody··on Secret scanning is now available for free on public repositoriesIs scanning only based on regex? Or can it, say, parse a JWT and infer who it came from through those properties?