Github secret truncated after "$"

Hello,

I found a bug in github secrets.
If the secret contains “$”, for example “hello$world”. Then when used in github actions, we will only get “hello” and everything after and including the dollar sign will be removed.

How are you using the secret in your workflow? That behavior sounds like what would happen if you put it into a shell command unquoted, and the shell interpreted $world as reading a variable.

That is correct, Thank you

1 Like