HashiCorp participates in the GitHub token scanning project for Terraform Cloud (TFC). Whenever GitHub detects a token that looks like a TFC API token, it notifies HashiCorp of the token and location. HashiCorp automatically revokes the tokens that GitHub detects in order to protect customers. Customers will be notified over email about the action and the location of the token found on the public internet.
Terraform Cloud - GitHub Token Scanning
