Masked variables can be echoed a

GitLab CI/CD
1

Problem to solve

Masked variables can be seen if encoded in base64 and echoed out

when a variable is masked and protected it is possible to see it in a job/pipeline by doing something like this:

test=$(echo $MY_PASSWORD | base64)
echo $test

Steps to reproduce

Add the code above in any job and reference any masked variable that should be protected

Configuration

No specific configuration needed.

Versions

Please select whether options apply, and add the version information.

  • Self-managed
  • GitLab.com SaaS
  • Self-hosted Runners

Versions