From 5ff9eba4a44a34471ca7097e2679ab4c86ccd576 Mon Sep 17 00:00:00 2001
From: Ole Langbehn <ole.langbehn@inoio.de>
Date: Tue, 30 Jul 2024 17:48:26 +0200
Subject: [PATCH] HOLI-9235 hide sensitive information from CI build logs
---
.gitlab-ci.yml | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 786ffee..1d17334 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,7 +1,9 @@
default:
before_script:
- set -ex
- - env
+ # env -0 | sort -z | tr '\0' '\n': Sort env output alphabetically, keeping multiline variables intact
+ # egrep: Remove sensitive information from the output of env
+ - env -0 | sort -z | tr '\0' '\n' | egrep -ve '^(DOCKER_AUTH_CONFIG|GOOGLE_APPLICATION_CREDENTIALS)=.*'
interruptible: true
tags:
- 1cpu-4gb # build on smaller machine
--
GitLab