Merge pull request #14 from depot/mask

Mask exported token value
depot · Jul 16, 2024 · b0b1ea4 · b0b1ea4
2 parents eb2efd6 + 07d78b3
commit b0b1ea4
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/dist/index.js b/dist/index.js
@@ -2078,10 +2078,10 @@ var require_core = __commonJS({
       command_1.issueCommand("set-env", { name }, convertedVal);
     }
     exports.exportVariable = exportVariable2;
-    function setSecret(secret) {
+    function setSecret2(secret) {
       command_1.issueCommand("add-mask", {}, secret);
     }
-    exports.setSecret = setSecret;
+    exports.setSecret = setSecret2;
     function addPath2(inputPath) {
       const filePath = process.env["GITHUB_PATH"] || "";
       if (filePath) {
@@ -10942,6 +10942,7 @@ async function run() {
         if (res.result && res.result.token) {
           core.info(`Exchanged GitHub Actions OIDC token for temporary Depot token`);
           core.exportVariable("DEPOT_TOKEN", res.result.token);
+          core.setSecret(res.result.token);
           tokenFound = true;
         }
       } catch (err) {
@@ -10955,6 +10956,7 @@ async function run() {
             const oidcToken = await publicOIDC.getIDToken("https://depot.dev");
             core.info(`Using open-source pull request OIDC token for Depot authentication`);
             core.exportVariable("DEPOT_TOKEN", oidcToken);
+            core.setSecret(oidcToken);
           } catch (err) {
             core.info(`Unable to exchange open-source pull request OIDC token for temporary Depot token: ${err}`);
           }

diff --git a/src/index.ts b/src/index.ts
@@ -39,6 +39,7 @@ async function run() {
         if (res.result && res.result.token) {
           core.info(`Exchanged GitHub Actions OIDC token for temporary Depot token`)
           core.exportVariable('DEPOT_TOKEN', res.result.token)
+          core.setSecret(res.result.token)
           tokenFound = true
         }
       } catch (err) {
@@ -57,6 +58,7 @@ async function run() {
             const oidcToken = await publicOIDC.getIDToken('https://depot.dev')
             core.info(`Using open-source pull request OIDC token for Depot authentication`)
             core.exportVariable('DEPOT_TOKEN', oidcToken)
+            core.setSecret(oidcToken)
           } catch (err) {
             core.info(`Unable to exchange open-source pull request OIDC token for temporary Depot token: ${err}`)
           }