Thanks @kotyara85, this is indeed a bug introduced by a limitation in GH Actions toolkit. In the documentation I see this warning:
WARNING The add-mask and setSecret commands only support single line secrets. To register a multiline secrets you must register each line individually otherwise it will not be masked.
We'll get this fixed up and release a new provider. In the future, please send all security issues to security@hashicorp.com.
When using v0.2.1 actions output secrets in plaintext, here's an example
pipeline output
pipeline itself
The text was updated successfully, but these errors were encountered: