Valentin Maerten da90ecd083 fix: prevent secret variable leaks in summary, verbose and key ordering ...

- mask secret values in `task --summary` (commands and vars listing)
- mask resolved value of dynamic (sh) secrets in verbose logs
- use masked command for platform-skipped verbose log
- allow `secret` key in any position in a var definition (not only first)
- add `value` to the JSON schema var definition
- skip masking pass when no secret is present and dedup mask helpers
- document that the `secret` flag is not propagated to derived variables

2026-06-29 12:36:56 +02:00

16 KiB

Raw Blame History

View Raw