Sensitive project variables recorded in log when logging environment variables related to Nuget Restore action

Continua CI Bugs
1

CI 1.9.2.645

We’re passing a project level Text variable flagged as sensitive to the environment for NuGet Restore action. With the ‘Log Environment Variables’ action option set, it’s logging the variable value as plain text. I would expect that to be masked.

Workaround is de-selecting ‘Log Environment Variables’.

2

Hi Brenden,

Thank you for pointing out this oversight. We have now implemented an update to fix this issue, which will be included in the next version.

1 Like
3

Hi Brenden,

Version 1.9.2.663 includes a fix for this issue.