From 76953f7670ebbb818a661d57c70a20c03f1f59ba Mon Sep 17 00:00:00 2001
From: Ole Langbehn <ole.langbehn@inoio.de>
Date: Tue, 30 Jul 2024 17:48:26 +0200
Subject: [PATCH] HOLI-9235 hide sensitive information from CI build logs
---
.gitlab-ci.yml | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index b612a83..fd49d0c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,7 +1,9 @@
default:
before_script:
- set -ex
- - env
+ # env -0 | sort -z | tr '\0' '\n': Sort env output alphabetically, keeping multiline variables intact
+ # egrep: Remove sensitive information from the output of env
+ - env -0 | sort -z | tr '\0' '\n' | egrep -ve '^(DOCKER_AUTH_CONFIG|GOOGLE_APPLICATION_CREDENTIALS)=.*'
interruptible: true
tags:
- 1cpu-4gb
--
GitLab