Good quick read on being more careful with slack webhook urls/tokens. It'd be neat if github could detect common key patterns in commits and warn if they see any. But not sure how many key patterns are that predictable!