bircni 68c6a5b4f1 feat: mask secrets that reach the log in an encoded form (#1108) ...

Only the verbatim value of a secret was masked, so a secret leaked through an action that serialized it stayed readable: `toJSON(secrets)` escapes it, an Authorization header carries it base64-encoded, a URL percent-encodes it. Each secret and `::add-mask::` value is now masked in those forms too, matching the value encoders of GitHub's runner. Encodings that leave the value unchanged are skipped, so a plain token still costs a single replacement pair. Includes regression tests.

Reviewed-on: https://gitea.com/gitea/runner/pulls/1108
Reviewed-by: Zettat123 <39446+zettat123@noreply.gitea.com>

2026-07-31 12:35:10 +00:00

..

hashfiles

Merge gitea/act into act/

2026-04-22 22:29:06 +02:00

res

Merge gitea/act into act/

2026-04-22 22:29:06 +02:00

testdata

chore(deps): pin dependencies (#1117)

2026-07-27 14:38:07 +00:00

action_cache_test.go

fix: matrix-job data races + outputs, leaner offline test suite (#994)

2026-05-29 05:23:10 +00:00

action_cache.go

Merge gitea/act into act/

2026-04-22 22:29:06 +02:00

action_composite_test.go

fix: prevent exponential growth of RunContext masks in composite actions (#1059)

2026-07-01 18:50:34 +00:00

action_composite.go

fix: prevent exponential growth of RunContext masks in composite actions (#1059)

2026-07-01 18:50:34 +00:00

action_test.go

feat: run pre-entrypoint and post-entrypoint of docker actions (#1106)

2026-07-28 05:36:35 +00:00

action.go

feat!: add cache service v2, add toolkit patches (#1110)

2026-07-31 12:08:44 +00:00

cancellation_test.go

fix: classify a cancelled step as an interruption, not a failure (#1095)

2026-07-21 11:16:56 +00:00

command_test.go

fix: escape command data the runner writes itself (#1120)

2026-07-27 15:16:49 +00:00

command.go

fix: escape command data the runner writes itself (#1120)

2026-07-27 15:16:49 +00:00

container_mock_test.go

Rename act_runner to runner (#850)

2026-04-30 20:12:51 +00:00

expression_test.go

fix: accept natively typed boolean workflow inputs (#1087)

2026-07-14 20:16:19 +00:00

expression.go

feat: report runner name, environment, workspace and debug to jobs (#1105)

2026-07-28 05:29:34 +00:00

helpers_test.go

test: speed up (#1121)

2026-07-28 14:34:04 +00:00

job_executor_test.go

test: speed up (#1121)

2026-07-28 14:34:04 +00:00

job_executor.go

feat: add job hooks (#1111)

2026-07-29 19:16:24 +00:00

job_hooks_test.go

feat: add job hooks (#1111)

2026-07-29 19:16:24 +00:00

job_hooks.go

feat: add job hooks (#1111)

2026-07-29 19:16:24 +00:00

local_repository_cache.go

Rename act_runner to runner (#850)

2026-04-30 20:12:51 +00:00

logger_test.go

feat: mask secrets that reach the log in an encoded form (#1108)

2026-07-31 12:35:10 +00:00

logger.go

feat: mask secrets that reach the log in an encoded form (#1108)

2026-07-31 12:35:10 +00:00

max_parallel_test.go

Rename act_runner to runner (#850)

2026-04-30 20:12:51 +00:00

reusable_workflow_test.go

fix: attach task token when cloning actions from self-hosted instance on a different host (#1056)

2026-06-30 16:18:12 +00:00

reusable_workflow.go

fix: attach task token when cloning actions from self-hosted instance on a different host (#1056)

2026-06-30 16:18:12 +00:00

run_context_test.go

feat: propagate proxy variables to jobs, services and builds (#1112)

2026-07-30 08:15:48 +00:00

run_context.go

feat: propagate proxy variables to jobs, services and builds (#1112)

2026-07-30 08:15:48 +00:00

runner_test.go

test: speed up (#1121)

2026-07-28 14:34:04 +00:00

runner.go

feat: propagate proxy variables to jobs, services and builds (#1112)

2026-07-30 08:15:48 +00:00

step_action_local_test.go

Rename act_runner to runner (#850)

2026-04-30 20:12:51 +00:00

step_action_local.go

Rename act_runner to runner (#850)

2026-04-30 20:12:51 +00:00

step_action_remote_test.go

enhance: report a GitHub-style "Set up job" section (#1089)

2026-07-22 14:58:23 +00:00

step_action_remote.go

feat!: add cache service v2, add toolkit patches (#1110)

2026-07-31 12:08:44 +00:00

step_docker_test.go

fix: stop racing the daemon when removing containers (#1093)

2026-07-21 11:03:15 +00:00

step_docker.go

fix: allow relocating the tool cache and mounting over runner paths (#1122)

2026-07-29 21:32:28 +00:00

step_factory_test.go

Rename act_runner to runner (#850)

2026-04-30 20:12:51 +00:00

step_factory.go

Rename act_runner to runner (#850)

2026-04-30 20:12:51 +00:00

step_run_print_test.go

Rename act_runner to runner (#850)

2026-04-30 20:12:51 +00:00

step_run_test.go

Rename act_runner to runner (#850)

2026-04-30 20:12:51 +00:00

step_run.go

fix: escape command data the runner writes itself (#1120)

2026-07-27 15:16:49 +00:00

step_test.go

feat: report runner name, environment, workspace and debug to jobs (#1105)

2026-07-28 05:29:34 +00:00

step.go

fix: escape command data the runner writes itself (#1120)

2026-07-27 15:16:49 +00:00

toolkit_patch_e2e_test.go

feat!: add cache service v2, add toolkit patches (#1110)

2026-07-31 12:08:44 +00:00

toolkit_patch_test.go

feat!: add cache service v2, add toolkit patches (#1110)

2026-07-31 12:08:44 +00:00

toolkit_patch.go

feat!: add cache service v2, add toolkit patches (#1110)

2026-07-31 12:08:44 +00:00