GitHub Community
Why is "fortran" censored in the log display? #27210
-
|
This is an odd one, but I noticed it today in trying to get GitHub Actions working on a repo. Namely, when I watch the log output scroll by I see: for this bit of the yaml file: and in one of the steps I have: and the output is:
And then later on in the logging: Each one of those Note: things seem to work, but I’m just really baffled by this. |
Beta Was this translation helpful? Give feedback.
Replies: 3 comments 3 replies
-
|
That is a bit weird. 🤔 Do you have a secret that contains |
Beta Was this translation helpful? Give feedback.
-
|
Could it be that the secrets masker is a bit too over-zealous with the values it masks and is including flag values like "1", "0"? I see the digit '1' being consistently replaced by *** in log files, and this thread is the only explanation I can find. Would that make sense? See: https://github.com/Perl/perl5/runs/7904373887?check_suite_focus=true#step:9:580 where you can see the file name is ../cpan/Archive-Tar/t/01_use.t and indeed in that log file every place I see *** where i can easily verify what the value should have been the value is '1'. |
Beta Was this translation helpful? Give feedback.
-
|
If you've set a secret that contains the value |
Beta Was this translation helpful? Give feedback.
-
|
I see. Thanks. Perhaps single letter values and digits and words like "true" and "false" should be excluded. :-) /me imagines what would happen if you put the letters 'a' to 'z' in the secrets as values. :-) |
Beta Was this translation helpful? Give feedback.
-
|
@thomasshaped Oooh. I did not know that exisited! Guess what I added to this workflow when I was updating it? Docker Hub Authorization for my image pull because of the whole “limits on anonymous pulls” thing they announced. And want to guess my Docker Hub username? (Not too much of a reveal as it’s my default internet username almost everywhere.) Though now as I read actions/runner-images#1445, maybe I don’t need to worry? Sounds like GitHub might have reached an agreement that it isn’t needed for public images pulls into GitHub Actions? Sigh. Thanks. Weird mystery solved. (Though I guess this could make a very inefficient attack on secrets.) |
Beta Was this translation helpful? Give feedback.
-
|
Oh no way, wild guess but I’m glad it was right! 😅
mathomp4:
I believe this is the case, yep! Public pulls of images should not be affected by these rate limits when used on GitHub-hosted runners. |
Beta Was this translation helpful? Give feedback.
That is a bit weird. 🤔 Do you have a secret that contains
fortranin it? It might be the secret masker that’s doing it.