diff --git a/context/config_setup.go b/context/config_setup.go
index 4236a81d9..6cb8ddb6c 100644
--- a/context/config_setup.go
+++ b/context/config_setup.go
@@ -18,7 +18,9 @@ const (
 )
 
 var (
-	oauthClientID     = "178c6fc778ccc68e1d6a"
+	// The "GitHub CLI" OAuth app
+	oauthClientID = "178c6fc778ccc68e1d6a"
+	// This value is safe to be embedded in version control
 	oauthClientSecret = "34ddeff2b558a23d38fba8a6de74f086ede1cc0b"
 )