[Bug]: Secrets containing "$" are not working correctly

[igor-topolski]

Description

I added a secret to environmental variables in my project; let's say it was
MY_SUPER_SECRET=something$1234

The secret would get corrupted and omit anything past the dollar sign symbol. I tried various escaping techniques (quotations, backslashes, etc.) but with no luck. I ended up changing the secret so it doesn't contain the $ character; however, it is often not an option (some secrets always or often have it).

EDIT: I use Cloud version

Minimal Reproduction (if possible, example repository)

1. Create a project (I used a pre-built Dockerfile hosted on a private ghcr.io)
2. Add a secret to Environment Variables containing $.
3. Try to consume secret in your application or:
   3.1. docker exec -it /container /bin/bash (or any available shell) into your container
   3.2. Run echo SECRET_NAME

In my case, the secret would get truncated at $.

Exception or Error

The secret gets truncated at $ symbol.

Version

v4.0.0-beta.236

[andrasbacsai]

I tried to replicate it, but I could not.

Can you please show me the same screens for your app?

[igor-topolski]

Hmmm, that's interesting the secret in my case had @ a few characters and then $.

Something along the lines of abcde@fghijk$123. Let me try and replicate it once again.

[igor-topolski]

I managed to reproduce it. Interestingly, not all secrets cause that behaviour.

I think it happens when there are:

• at symbol @
• dollar sign $
• other characters k

In that case everything past @ gets truncated

[andrasbacsai]

This will be fixed in the upcoming version.