Description of the false positive
Bearer and OAuth are not part of the credentials, but rather describe the type of the credentials.
URL to the alert on the project page on LGTM.com
https://lgtm.com/projects/g/d-fischer/twitch/snapshot/5249a6f49264f6678324dcf6e5ad37dd95b49935/files/packages/twitch-api-call/src/apiCall.ts#x2d89925154b9f725:1