Drone hide extra characters in a build log

Drone Support
1

Hi!
I use multiple secret credentials in my job. Drone used to hide the secrets in a job log properly.
I’ve just added 3 more secrets to a drone config and now Drone hides too much information (screenshots attached).

Drone version: 1.4.0

Secrets:

  environment:
TF_IN_AUTOMATION: "true"
DO_TOKEN:
  from_secret: DO_TOKEN
DO_ACCESS_KEY:
  from_secret: DO_ACCESS_KEY
DO_SECRET_KEY:
  from_secret: DO_SECRET_KEY
TF_VAR_tracking_count:
  from_secret: TRACKING
TF_VAR_torg_count:
  from_secret: TORG
TF_VAR_lb_t_count:
  from_secret: LB_T
TF_VAR_lb_b_count:
  from_secret: LB_B

image
image1290×404 49.6 KB

2

There is nothing Drone can do about this because sensitive data could be everywhere. I noticed this too when the word “Result” go censored, the username was “esu”. This could leak data and I don’t think you can do anything against it without hiding all output.

3

Thank you for the feedback.

But if I delete all TF_VAR_* secrets, the problem will gone.
I’ve already tested it.