[GH-ISSUE #380] Secrets are logged #269

Closed
opened 2026-03-01 21:41:55 +03:00 by kerem · 4 comments
Owner

Originally created by @OJFord on GitHub (Oct 2, 2020).
Original GitHub issue: https://github.com/nektos/act/issues/380

- uses: action@v1
  with:
    secret: ${{ secret.SO_SECRET }}

run as act push -e t -s SO_SECRET, logs:

docker run image=act-ojford-action-v1:latest entrypoint=[] cmd=["hunter2"]

where hunter2 is the secret contents of $SO_SECRET.

(I understand that not printing the contents of an environment variable isn't going to make anything any more secure but it's still not ideal to wantonly print secrets in term history.)

(Obligatory 'but thanks for the great tool!' (really 👍))

Originally created by @OJFord on GitHub (Oct 2, 2020). Original GitHub issue: https://github.com/nektos/act/issues/380 ```sh - uses: action@v1 with: secret: ${{ secret.SO_SECRET }} ``` run as `act push -e t -s SO_SECRET`, logs: ```sh docker run image=act-ojford-action-v1:latest entrypoint=[] cmd=["hunter2"] ``` where `hunter2` is the secret contents of `$SO_SECRET`. (I understand that not printing the contents of an _environment variable_ isn't going to make anything any more _secure_ but it's still not ideal to wantonly print secrets in term history.) (Obligatory 'but thanks for the great tool!' (really :+1:))
kerem 2026-03-01 21:41:55 +03:00
  • closed this issue
  • added the
    stale
    label
Author
Owner

@github-actions[bot] commented on GitHub (Dec 2, 2020):

Issue is stale and will be closed in 7 days unless there is new activity

<!-- gh-comment-id:736905813 --> @github-actions[bot] commented on GitHub (Dec 2, 2020): Issue is stale and will be closed in 7 days unless there is new activity
Author
Owner

@OJFord commented on GitHub (Dec 2, 2020):

Activity.

<!-- gh-comment-id:737183579 --> @OJFord commented on GitHub (Dec 2, 2020): Activity.
Author
Owner

@catthehacker commented on GitHub (Dec 2, 2020):

Could you provide more info/workflow? I'm not able to reproduce that.

<!-- gh-comment-id:737356397 --> @catthehacker commented on GitHub (Dec 2, 2020): Could you provide more info/workflow? I'm not able to reproduce that.
Author
Owner

@github-actions[bot] commented on GitHub (Feb 19, 2021):

Issue is stale and will be closed in 14 days unless there is new activity

<!-- gh-comment-id:781725490 --> @github-actions[bot] commented on GitHub (Feb 19, 2021): Issue is stale and will be closed in 14 days unless there is new activity
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#269
No description provided.