Not only secrets, but anything, if masked, cannot be referenced into another job:
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 6.3k
- Forks
- 1.4k
- Avg merge
- 1d 16h
- Merged PRs (30d)
- 24
Description
Not only secrets, but anything, if masked, cannot be referenced into another job:
e.g. when I use amazon-ecr-login get a registry in outputs,
https://github.com/marketplace/actions/amazon-ecr-login-action-for-github-actions
REGISTRY: ${{ steps.login-ecr.outputs.registry }}
outputs:
registry: ${{ steps.login-ecr.outputs.registry }}
but if I define the registry into output for another job to use, the full registry string is masked like this:
Logging into registry ***.dkr.ecr.ap-southeast-1.amazonaws.com
in another job, use it with jobs.job_id.outputs.registry it got empty
this is a BUG, not only enhancement request in community/community#13082
Originally posted by @tx0c in https://github.com/actions/runner/issues/1498#issuecomment-1353544464
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the amazon-ecr-login workflow described in this issue, focusing on the step output, the job output, and the later jobs.job_id.outputs.registry reference. Trace how the runner masks values and transfers outputs between jobs. Done means a masked registry value is not lost when exposed as a job output, with masking behavior still intact.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp, github-actions
- Domain
- ci-cd, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100