secret-scan-a.json

{
  "name": "secret-scan-a",
  "pair": "secret-scan",
  "phase": "A",
  "description": "Fix a push that's blocked by GitHub secret scanning because a PAT was committed.",
  "setup": {
    "repo_state": "commit containing ghp_xxxxxxxxxxxx in a Python file",
    "ci_state": "push rejected with GH013 error",
    "error_message": "remote: error: GH013: Secret scanning found a classic PAT in file.py:42"
  },
  "expected_outcome": {
    "fix_steps": ["revoke token at github.com/settings/tokens", "remove secret from code", "git filter-branch or BFG to clean history", "generate new token"],
    "lesson_generated": true,
    "lesson_fields": ["title", "domain", "problem", "root_cause", "solution", "verification"]
  },
  "validation": {
    "lesson_schema_valid": true,
    "lesson_mentions_revoke": true,
    "lesson_mentions_redaction": true
  },
  "teaches": "Secret scanning response pattern"
}