WARNING: THIS SITE IS A MIRROR OF GITHUB.COM / IT CANNOT LOGIN OR REGISTER ACCOUNTS / THE CONTENTS ARE PROVIDED AS-IS / THIS SITE ASSUMES NO RESPONSIBILITY FOR ANY DISPLAYED CONTENT OR LINKS / IF YOU FOUND SOMETHING MAY NOT GOOD FOR EVERYONE, CONTACT ADMIN AT ilovescratch@foxmail.com
Skip to content

Secret redaction don't always reliably work on multiline values in debug mode #2

@ajhalili2006

Description

@ajhalili2006

There are edge cases where secrets redaction via core.setSecret don't reliably work on multiline values when Actions debug mode is enable, which risk secret key leakage for things like GitHub App private keys.

This is a known issue to be documented in the README, and will discuss about this in the GitHub community forums for advice later.

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingdocumentationImprovements or additions to documentation

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions