Avoid leaking secrets when running in debug mode

alisw · May 14, 2024 · bcda506 · bcda506
1 parent e95a686
commit bcda506
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/ci/build-helpers.sh b/ci/build-helpers.sh
@@ -182,7 +182,9 @@ function modtime () {
 function ensure_vars () {
   # Make sure variables are defined, and export them.
   for var in "$@"; do
-    if [ -z "${!var}" ]; then
+    # The +x is needed to avoid leaking secrets when running with
+    # bash -ex
+    if [ -z ${!var+x} ]; then
       echo "$(basename "$0"): error: required variable $var not defined!" >&2
       exit 1
     else