From c656a11252fa34145fdc7524bbbcdf5d40e4946d Mon Sep 17 00:00:00 2001
From: "Michael B. Gale" <mbg@github.com>
Date: Tue, 27 Jan 2026 11:31:12 +0000
Subject: [PATCH] Use `.match` in `isAuthToken` and add repeated call to test

---
 lib/start-proxy-action.js    | 2 +-
 src/artifact-scanner.test.ts | 1 +
 src/artifact-scanner.ts      | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/lib/start-proxy-action.js b/lib/start-proxy-action.js
index 83d722db5..7d39629cf 100644
--- a/lib/start-proxy-action.js
+++ b/lib/start-proxy-action.js
@@ -103998,7 +103998,7 @@ var GITHUB_TOKEN_PATTERNS = [
 ];
 function isAuthToken(value, patterns = GITHUB_TOKEN_PATTERNS) {
   for (const { type: type2, pattern } of patterns) {
-    if (pattern.test(value)) {
+    if (value.match(pattern)) {
       return type2;
     }
   }
diff --git a/src/artifact-scanner.test.ts b/src/artifact-scanner.test.ts
index 137738201..d2ecd18e2 100644
--- a/src/artifact-scanner.test.ts
+++ b/src/artifact-scanner.test.ts
@@ -31,6 +31,7 @@ test("isAuthToken", (t) => {
 
   // Token types for strings that are tokens.
   t.is(isAuthToken(`ghp_${makeTestToken()}`), TokenType.PersonalAccessClassic);
+  t.is(isAuthToken(`ghp_${makeTestToken()}`), TokenType.PersonalAccessClassic);
   t.is(
     isAuthToken(`ghs_${makeTestToken(255)}`),
     TokenType.AppInstallationAccess,
diff --git a/src/artifact-scanner.ts b/src/artifact-scanner.ts
index 329ced0cb..90c424197 100644
--- a/src/artifact-scanner.ts
+++ b/src/artifact-scanner.ts
@@ -88,7 +88,7 @@ export function isAuthToken(
   patterns: TokenPattern[] = GITHUB_TOKEN_PATTERNS,
 ) {
   for (const { type, pattern } of patterns) {
-    if (pattern.test(value)) {
+    if (value.match(pattern)) {
       return type;
     }
   }