Any string that matches access token regexp provided by Tencent (see https://docs.github.com/en/developers/overview/secret-scanni...).
.*
The same could be said for all the other Secret Scanning partners GitHub has, like AWS and so on.
That being said, it's impossible that a "bad regexp" is gonna make its way to the GitHub codebase.