Sensitive project variables recorded in log when logging environment variables related to Nuget Restore action


We’re passing a project level Text variable flagged as sensitive to the environment for NuGet Restore action. With the ‘Log Environment Variables’ action option set, it’s logging the variable value as plain text. I would expect that to be masked.

Workaround is de-selecting ‘Log Environment Variables’.

Hi Brenden,

Thank you for pointing out this oversight. We have now implemented an update to fix this issue, which will be included in the next version.

1 Like

Hi Brenden,

Version includes a fix for this issue.