Secrets are removed from step titles


  • Add a secret with any name and the value “foo”
  • Create a step with the title “foo”

Expected Result: Step named ‘foo’ is executed

Actual Result: Step named ‘***’ is executed

Is this behaviour intended?

Yes, we obfuscate any secrets in the output to protect from accidently exposing a key.

Certainly understand it in logs/step output and any echoed commands, just in step titles seemed a little odd.

As github stuff answered, secrets do not get printed when your action runs.

If you’d like to set the ‘foo’ as an variable in the title, you can use env instead.