This allowed unintended data to be included in the match as long as it was on one line and ended with something vaguely "}}}, and combined with the one-shot json Decode, if you had more than one instance of the docker auths struct in one line of one chunk, only the first was returned as a result.